--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34"} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46892","PortSpecifier":{"PortValue":46892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46892","PortSpecifier":{"PortValue":46892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222902,"nanos":660285627},"http":{"id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e50ab1-a297-421f-ad7c-8ae2a9b6d93d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34216","PortSpecifier":{"PortValue":34216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34216","PortSpecifier":{"PortValue":34216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222902,"nanos":725875802},"http":{"id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f4f403d-c6d6-46fd-8fc4-50ef99f058f9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46908","PortSpecifier":{"PortValue":46908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","method":"GET","path":"/maas-api/v1/api-keys/fe90cb76-6559-4c0e-ae37-74085c70f517","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:46908","PortSpecifier":{"PortValue":46908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222902,"nanos":789580313},"http":{"id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","method":"GET","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fe90cb76-6559-4c0e-ae37-74085c70f517",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/fe90cb76-6559-4c0e-ae37-74085c70f517",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15db4ad3-d670-4e96-bb2a-a10aa7e48b92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34230","PortSpecifier":{"PortValue":34230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","method":"GET","path":"/maas-api/v1/api-keys/dfcc72d8-1853-4b28-b8cd-1a03b3e50e34","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34230","PortSpecifier":{"PortValue":34230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222902,"nanos":829897869},"http":{"id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","method":"GET","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dfcc72d8-1853-4b28-b8cd-1a03b3e50e34",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/dfcc72d8-1853-4b28-b8cd-1a03b3e50e34",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbcb0249-f6a9-46c6-af22-9e6bae9c78b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c76012-603d-4557-875c-876cfe03e85f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33118","PortSpecifier":{"PortValue":33118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4c76012-603d-4557-875c-876cfe03e85f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4c76012-603d-4557-875c-876cfe03e85f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33118","PortSpecifier":{"PortValue":33118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222927,"nanos":539820296},"http":{"id":"c4c76012-603d-4557-875c-876cfe03e85f","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4c76012-603d-4557-875c-876cfe03e85f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4c76012-603d-4557-875c-876cfe03e85f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4c76012-603d-4557-875c-876cfe03e85f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c76012-603d-4557-875c-876cfe03e85f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4c76012-603d-4557-875c-876cfe03e85f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35410","PortSpecifier":{"PortValue":35410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35410","PortSpecifier":{"PortValue":35410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222927,"nanos":582819568},"http":{"id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6c3c45c5-b021-454e-a0f7-1f575f9cbe16","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33126","PortSpecifier":{"PortValue":33126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33126","PortSpecifier":{"PortValue":33126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222927,"nanos":627611780},"http":{"id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","method":"GET","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WC2szWdOvaUhRjmF_CVAc3VtsmCGT9Pin6SrArtS3v91LLJbAwgFzaiFHCMR"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WC2szWdOvaUhRjmF_CVAc3VtsmCGT9Pin6SrArtS3v91LLJbAwgFzaiFHCMR\"}"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9183e0b1-4a86-4bd7-b762-59378b268902","keyName":"e2e-auth-iso-a-306491","subscription":"e2e-auth-iso-00adde","tenant":"e2e-shared-a-b44c0f","userId":"9183e0b1-4a86-4bd7-b762-59378b268902","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-00adde"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:28:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff0675b6-05c1-460b-bc9d-1b5db3ddf277","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57574","PortSpecifier":{"PortValue":57574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57574","PortSpecifier":{"PortValue":57574}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222944,"nanos":998747465},"http":{"id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ff0fbdf-f7e2-455c-9004-e26004eb079c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38564","PortSpecifier":{"PortValue":38564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38564","PortSpecifier":{"PortValue":38564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222945,"nanos":41223373},"http":{"id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35a22f4f-caaa-4705-9d62-f514c95d9a8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38572","PortSpecifier":{"PortValue":38572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca6bccc8-3714-4243-adcb-f542c86cf803","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38572","PortSpecifier":{"PortValue":38572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222945,"nanos":81315246},"http":{"id":"ca6bccc8-3714-4243-adcb-f542c86cf803","method":"GET","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15apuAKzH6KmWsh5N_GeybnGW3jc6nBlHTaPzP9ttfdhPApKx7cZi2J6NyV5X"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15apuAKzH6KmWsh5N_GeybnGW3jc6nBlHTaPzP9ttfdhPApKx7cZi2J6NyV5X\"}"} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T17:29:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca6bccc8-3714-4243-adcb-f542c86cf803","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3de7a29c-8bff-449f-8869-62624505574b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48138","PortSpecifier":{"PortValue":48138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3de7a29c-8bff-449f-8869-62624505574b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3de7a29c-8bff-449f-8869-62624505574b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48138","PortSpecifier":{"PortValue":48138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222960,"nanos":297564834},"http":{"id":"3de7a29c-8bff-449f-8869-62624505574b","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3de7a29c-8bff-449f-8869-62624505574b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3de7a29c-8bff-449f-8869-62624505574b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3de7a29c-8bff-449f-8869-62624505574b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3de7a29c-8bff-449f-8869-62624505574b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3de7a29c-8bff-449f-8869-62624505574b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33884","PortSpecifier":{"PortValue":33884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33884","PortSpecifier":{"PortValue":33884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222960,"nanos":341431182},"http":{"id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f1eb17-0da3-4e66-abe5-b63eaa66b99e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48148","PortSpecifier":{"PortValue":48148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:48148","PortSpecifier":{"PortValue":48148}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222960,"nanos":379789746},"http":{"id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82d75ecf-1fc6-406c-bab9-6165f20f1c67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33888","PortSpecifier":{"PortValue":33888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33888","PortSpecifier":{"PortValue":33888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222960,"nanos":420290996},"http":{"id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a27c9c94-f0c4-4afc-a411-e363d772e18b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47652","PortSpecifier":{"PortValue":47652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42c6943f-be1a-41a5-bf75-0037997f1f15","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47652","PortSpecifier":{"PortValue":47652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222978,"nanos":728790935},"http":{"id":"42c6943f-be1a-41a5-bf75-0037997f1f15","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42c6943f-be1a-41a5-bf75-0037997f1f15","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35368131-c1f1-43a0-9474-1111a820abe1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40026","PortSpecifier":{"PortValue":40026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35368131-c1f1-43a0-9474-1111a820abe1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35368131-c1f1-43a0-9474-1111a820abe1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40026","PortSpecifier":{"PortValue":40026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222978,"nanos":773003492},"http":{"id":"35368131-c1f1-43a0-9474-1111a820abe1","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35368131-c1f1-43a0-9474-1111a820abe1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35368131-c1f1-43a0-9474-1111a820abe1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35368131-c1f1-43a0-9474-1111a820abe1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35368131-c1f1-43a0-9474-1111a820abe1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35368131-c1f1-43a0-9474-1111a820abe1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40042","PortSpecifier":{"PortValue":40042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","method":"GET","path":"/maas-api/v1/api-keys/6485cfac-1a90-4f95-a278-3a4e28b40ba2","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:40042","PortSpecifier":{"PortValue":40042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222978,"nanos":809960808},"http":{"id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","method":"GET","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6485cfac-1a90-4f95-a278-3a4e28b40ba2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6485cfac-1a90-4f95-a278-3a4e28b40ba2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43a62cbd-661a-4cf7-ad05-f54eb2a2072a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47668","PortSpecifier":{"PortValue":47668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8380c461-1952-4d1b-89ce-1b25247ec456","method":"GET","path":"/maas-api/v1/api-keys/6485cfac-1a90-4f95-a278-3a4e28b40ba2","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47668","PortSpecifier":{"PortValue":47668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222978,"nanos":841416881},"http":{"id":"8380c461-1952-4d1b-89ce-1b25247ec456","method":"GET","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6485cfac-1a90-4f95-a278-3a4e28b40ba2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6485cfac-1a90-4f95-a278-3a4e28b40ba2",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8380c461-1952-4d1b-89ce-1b25247ec456","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37002","PortSpecifier":{"PortValue":37002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37002","PortSpecifier":{"PortValue":37002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222996,"nanos":203699443},"http":{"id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea9565f1-485e-4ff5-bea4-77927b8cb7be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55136","PortSpecifier":{"PortValue":55136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55136","PortSpecifier":{"PortValue":55136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222996,"nanos":244277211},"http":{"id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/auth-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3a9f11c-e9e5-4ac8-a45f-dcc2e55e638a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37014","PortSpecifier":{"PortValue":37014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"316d8471-9f00-4d50-8032-649a2f69fb68","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37014","PortSpecifier":{"PortValue":37014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784222996,"nanos":282448509},"http":{"id":"316d8471-9f00-4d50-8032-649a2f69fb68","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-flihvhjyw5qDyQpM_GxqQ2p8o15WBpWjpuIKS2pPI3XBkrrquXD4atrHfgoF"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-flihvhjyw5qDyQpM_GxqQ2p8o15WBpWjpuIKS2pPI3XBkrrquXD4atrHfgoF\"}"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3733be7b-75b2-4046-a5ca-1273a6cb1ec8","keyName":"e2e-auth-iso-a-cdf60d","subscription":"e2e-auth-iso-2f8239","tenant":"e2e-shared-a-b44c0f","userId":"3733be7b-75b2-4046-a5ca-1273a6cb1ec8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/auth-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2f8239"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:29:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"316d8471-9f00-4d50-8032-649a2f69fb68","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8392c684b3d35b78b0cce6ec0e15a2d23c7e6472e3dea77e7c8f9b43353ffc72"} {"level":"info","ts":"2026-07-16T17:30:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/160a1a3ed3b13137cded4d80f106ae2090a03d75187023f9a8d49be4e20593f8"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89a576be26a1ee395bc5f7a5b8783f3225c690de1ea7fcadeb5b567adc9643ef"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99e7c08177170fa06e2ffc75b3a21858ea0d51129a6adcc6eafbe5e88b8b1243"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/330088c98ceb058318ff599584f5fe160a6fb0dbdcd3ed3005d725cf50abd77f"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1ffd7870651425f644e526048c3201d6b44ba662f7d098a72bddca2d1fc7d35"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/973fbe03d357266ed9f3b8337016970a164162d6a01750ac21a6ab35d70f9967"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55af00fd9873256d1dea928bd62501f345f73616215b46d9f81aacd6fff19ac1"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0851c0957717a0b17df5777c12b4698ac190dd7e15104211e3110ae629674de8"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35f75f12cfd87c5808642df2a3b483169bc19774862c0d26e416d14babe8d9ad"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d906b5485a086bfafcaff2ba00b2059ee3aeab9b6fcff7c5b0e4f4667c7c3ccb"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc41d9099294058d2f331147f25bfabeab7b129e376ce6bd533b200ab75fff34"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f1fe653968c8a37ec36d832d8c152bd70744897ea6848fc9cdb34191c05754c"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d5ac4bf1c4f0729a2ec4ce8fb4c7ecf6eae3d46090ea7be47b8ee64c8e9823e"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfb8cb96964345a221061897a04da241b6ecd49cc24ad9011602b645e828c88c"} {"level":"info","ts":"2026-07-16T17:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2018c5ceed1ddfdbdcaa662049196bf1965fad9f116e85932c29c1d8941cb05e"} {"level":"debug","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"} {"level":"info","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"} {"level":"error","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"error","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"error","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"} {"level":"error","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"error","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"error","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:30:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:30:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:30:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"error","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"debug","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11"} {"level":"info","ts":"2026-07-16T17:31:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38498","PortSpecifier":{"PortValue":38498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5146591f-2e95-4827-8e7e-f73c17384f4e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38498","PortSpecifier":{"PortValue":38498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223087,"nanos":911288555},"http":{"id":"5146591f-2e95-4827-8e7e-f73c17384f4e","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/sub-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5146591f-2e95-4827-8e7e-f73c17384f4e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54818","PortSpecifier":{"PortValue":54818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54419583-a2c7-49cf-8331-b53d5134e51a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54818","PortSpecifier":{"PortValue":54818}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223087,"nanos":958869214},"http":{"id":"54419583-a2c7-49cf-8331-b53d5134e51a","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/sub-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54419583-a2c7-49cf-8331-b53d5134e51a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af89fadf-6ac1-4969-8585-65937404906e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38504","PortSpecifier":{"PortValue":38504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af89fadf-6ac1-4969-8585-65937404906e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af89fadf-6ac1-4969-8585-65937404906e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38504","PortSpecifier":{"PortValue":38504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223087,"nanos":999561625},"http":{"id":"af89fadf-6ac1-4969-8585-65937404906e","method":"GET","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ct50blBqI7wPoYnb_IpmgBn3PyghqaGFHSLNqAbCvKqyMpn5UprFgAMcM78H"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ct50blBqI7wPoYnb_IpmgBn3PyghqaGFHSLNqAbCvKqyMpn5UprFgAMcM78H\"}"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ee8f3474-78e1-4bdf-adbb-9b3eb82b9553","keyName":"e2e-sub-iso-a06f42","subscription":"e2e-a-only-29f50d","tenant":"e2e-shared-a-b44c0f","userId":"ee8f3474-78e1-4bdf-adbb-9b3eb82b9553","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af89fadf-6ac1-4969-8585-65937404906e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/sub-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-29f50d"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af89fadf-6ac1-4969-8585-65937404906e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af89fadf-6ac1-4969-8585-65937404906e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af89fadf-6ac1-4969-8585-65937404906e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54822","PortSpecifier":{"PortValue":54822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:54822","PortSpecifier":{"PortValue":54822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223088,"nanos":45901184},"http":{"id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","method":"GET","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KR8iPsK8QURYIYkm_MBZ7VLlsAmayfDVDzlUYJNLy1WzZak5skHh0xOZxADG"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KR8iPsK8QURYIYkm_MBZ7VLlsAmayfDVDzlUYJNLy1WzZak5skHh0xOZxADG\"}"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf040ff6-ea69-4860-ae71-6dc09eb98d36","keyName":"e2e-sub-iso-733fa8","subscription":"e2e-b-only-29f50d","tenant":"e2e-shared-b-8d3a22","userId":"cf040ff6-ea69-4860-ae71-6dc09eb98d36","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/sub-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-29f50d"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afabd6f7-1c25-4cbb-918a-e85ceaa18be0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58374","PortSpecifier":{"PortValue":58374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0271cc91-a604-4326-8d9a-b304de656fd9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58374","PortSpecifier":{"PortValue":58374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223102,"nanos":551810567},"http":{"id":"0271cc91-a604-4326-8d9a-b304de656fd9","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/sub-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0271cc91-a604-4326-8d9a-b304de656fd9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34696","PortSpecifier":{"PortValue":34696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34696","PortSpecifier":{"PortValue":34696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223102,"nanos":591703376},"http":{"id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/sub-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf9e3a3d-aa22-425c-89eb-24ccdbe580bc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58386","PortSpecifier":{"PortValue":58386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:58386","PortSpecifier":{"PortValue":58386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223102,"nanos":626451787},"http":{"id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ybt39pmC0TCUl6uj_Vr7Ly9gYS7qJFVUx6hPcRuY5LmSQwqODo5fmk4ATizv"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ybt39pmC0TCUl6uj_Vr7Ly9gYS7qJFVUx6hPcRuY5LmSQwqODo5fmk4ATizv\"}"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e26fee42-0944-443a-801a-9f4051c4f969","keyName":"e2e-sub-iso-2d3397","subscription":"e2e-shared-sub-d868ad","tenant":"e2e-shared-a-b44c0f","userId":"e26fee42-0944-443a-801a-9f4051c4f969","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/sub-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d868ad"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e72e20-faa2-4444-b687-dfb3bb8b9ddc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223102,"nanos":660152850},"http":{"id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AgwSvxELfs7oi4Zi_8LToJoaWoPW7owjsx3yewcLDeAZOy11NB9r47zA6WgF"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AgwSvxELfs7oi4Zi_8LToJoaWoPW7owjsx3yewcLDeAZOy11NB9r47zA6WgF\"}"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"78acae72-fd70-4e36-bbc1-4cebf04356a0","keyName":"e2e-sub-iso-f1bc30","subscription":"e2e-shared-sub-d868ad","tenant":"e2e-shared-b-8d3a22","userId":"78acae72-fd70-4e36-bbc1-4cebf04356a0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/sub-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d868ad"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fac5dc49-b92b-43d3-83fa-dec5c0740883","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"error","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"error","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:31:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"} {"level":"error","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/276d2512f165385a7bd2099c71196540c5657671ed192968cba13cb139f2a391"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"} {"level":"info","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2d655868788c081dad50f9fe56e1e49a403ad1de7d8a1d1f6476c31bd69ee4b"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1ff63c9dd92704bc923363db7916247093e8c6fb50047c450dab878213ecc11"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d70bd4ccc71867d65132fa1c8b1c66724a60dafe4f0d1a59f997d4b6f58db63"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8605c967826a262a5477194dfd4332cd2abd461158b5e67d5769d8970800b02"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2df04eefaede654f7016adcf4ff5fc1534a89e33f9b1965ac82cc702d4703502"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58d5e10fedbb274e53d61761d33d7cdedd54d8581ed694c6ad5a1a512d64f7e"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b34bbba6ef4db278c63a65c0faa78cb0a362dd063ca651c257098d621e30322"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9dc4c45c4e14cce8237f62846052acb64b2fea60d365cbcda1f5a021f629743"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82772be62848daa8edd50795732678d1eb8cc96df047458ce8fed4e211b1ef4b"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c0d6f75ea20f6e4af0c375876e251793b099c79b96d5ae67012166f63af5340"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1f03e55706057e4875720a5532652a490989c128583c32cd51a2cdfda429ef2"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c05e32e4a85c30d228aa49c0f682925144781ff811d42c369a2a6bbe9be7ec2e"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebf44d112aae504192e8a91a3a0f6209ca009b63dc3b1a4158cfb78030649cb3"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f88fc7ddd4790eb9c340a53bbffe701e4f6d81cff22c8f0aad3b88a9f95e1e5"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/364d25dab9926be75df0059bbba134cc72c67acd7d723d9641ba894370f7a095"} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"info","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"debug","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d"} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"info","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"error","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"error","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"} {"level":"error","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T17:32:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T17:32:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50456","PortSpecifier":{"PortValue":50456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50456","PortSpecifier":{"PortValue":50456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223165,"nanos":629706096},"http":{"id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b67761ad-1d2f-4f6f-ae4d-5c326bc698e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52942","PortSpecifier":{"PortValue":52942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52942","PortSpecifier":{"PortValue":52942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223165,"nanos":673951988},"http":{"id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25d6a1c4-8d4f-4b01-a6e2-90f10e767599","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50468","PortSpecifier":{"PortValue":50468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1204145d-0f37-4e87-bc4a-58c6224b863a","method":"POST","path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50468","PortSpecifier":{"PortValue":50468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223165,"nanos":714853963},"http":{"id":"1204145d-0f37-4e87-bc4a-58c6224b863a","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aUmGgwtCGQQFR1gg_dpNPfyjs90lxAU5VEX8jN5CcGOg22ODBrAcO3pBR9G2"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aUmGgwtCGQQFR1gg_dpNPfyjs90lxAU5VEX8jN5CcGOg22ODBrAcO3pBR9G2\"}"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","keyName":"e2e-rate-a-a2cb56","subscription":"e2e-rate-iso-a-a2cb56","tenant":"e2e-shared-a-b44c0f","userId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\",\"requestedSubscription\":\"e2e-rate-iso-a-a2cb56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2cb56","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2cb56"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","keyName":"e2e-rate-a-a2cb56","selected_subscription":"e2e-rate-iso-a-a2cb56","selected_subscription_key":"ai-tenant-e2e-shared-a-b44c0f/e2e-rate-iso-a-a2cb56@ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2cb56","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:32:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1204145d-0f37-4e87-bc4a-58c6224b863a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50476","PortSpecifier":{"PortValue":50476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","method":"POST","path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50476","PortSpecifier":{"PortValue":50476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223166,"nanos":775071018},"http":{"id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aUmGgwtCGQQFR1gg_dpNPfyjs90lxAU5VEX8jN5CcGOg22ODBrAcO3pBR9G2"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aUmGgwtCGQQFR1gg_dpNPfyjs90lxAU5VEX8jN5CcGOg22ODBrAcO3pBR9G2\"}"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","keyName":"e2e-rate-a-a2cb56","subscription":"e2e-rate-iso-a-a2cb56","tenant":"e2e-shared-a-b44c0f","userId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\",\"requestedSubscription\":\"e2e-rate-iso-a-a2cb56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2cb56","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2cb56"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","keyName":"e2e-rate-a-a2cb56","selected_subscription":"e2e-rate-iso-a-a2cb56","selected_subscription_key":"ai-tenant-e2e-shared-a-b44c0f/e2e-rate-iso-a-a2cb56@ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2cb56","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:32:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86eedc59-5aa3-4711-8860-f550ffac2ce6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50478","PortSpecifier":{"PortValue":50478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b378b21-adec-4057-ba98-fcecb507ad65","method":"POST","path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50478","PortSpecifier":{"PortValue":50478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223167,"nanos":816015048},"http":{"id":"0b378b21-adec-4057-ba98-fcecb507ad65","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aUmGgwtCGQQFR1gg_dpNPfyjs90lxAU5VEX8jN5CcGOg22ODBrAcO3pBR9G2"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aUmGgwtCGQQFR1gg_dpNPfyjs90lxAU5VEX8jN5CcGOg22ODBrAcO3pBR9G2\"}"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","keyName":"e2e-rate-a-a2cb56","subscription":"e2e-rate-iso-a-a2cb56","tenant":"e2e-shared-a-b44c0f","userId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\",\"requestedSubscription\":\"e2e-rate-iso-a-a2cb56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2cb56","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2cb56"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b335dd7-84e8-4508-8eb3-6d01c3d64bfa","keyName":"e2e-rate-a-a2cb56","selected_subscription":"e2e-rate-iso-a-a2cb56","selected_subscription_key":"ai-tenant-e2e-shared-a-b44c0f/e2e-rate-iso-a-a2cb56@ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2cb56","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:32:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b378b21-adec-4057-ba98-fcecb507ad65","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57736","PortSpecifier":{"PortValue":57736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57736","PortSpecifier":{"PortValue":57736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223180,"nanos":789962544},"http":{"id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fab94886-2718-4017-a7e1-1d2904a7e3b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56956","PortSpecifier":{"PortValue":56956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2361b649-5309-46fb-91f4-0bc69dc3b723","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56956","PortSpecifier":{"PortValue":56956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223180,"nanos":833343118},"http":{"id":"2361b649-5309-46fb-91f4-0bc69dc3b723","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"]}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ba81ec74d030"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=148e3444-115d-4a71-80c2-191519c14781"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"702cfec9-3d87-40c8-a6f6-4c1278e0d558","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2361b649-5309-46fb-91f4-0bc69dc3b723","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57738","PortSpecifier":{"PortValue":57738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c1268c5-485c-43d7-aa1f-040be893c390","method":"POST","path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57738","PortSpecifier":{"PortValue":57738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223180,"nanos":874324647},"http":{"id":"1c1268c5-485c-43d7-aa1f-040be893c390","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-142C8go98WUMHmHyb_AFyIn18zJMhBE8wNipbc262r19qbJKGBMd3Xp13cNFX"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-142C8go98WUMHmHyb_AFyIn18zJMhBE8wNipbc262r19qbJKGBMd3Xp13cNFX\"}"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","keyName":"e2e-rate-a-a3ddc6","subscription":"e2e-rate-iso-a-a3ddc6","tenant":"e2e-shared-a-b44c0f","userId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\",\"requestedSubscription\":\"e2e-rate-iso-a-a3ddc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3ddc6","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3ddc6"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","keyName":"e2e-rate-a-a3ddc6","selected_subscription":"e2e-rate-iso-a-a3ddc6","selected_subscription_key":"ai-tenant-e2e-shared-a-b44c0f/e2e-rate-iso-a-a3ddc6@ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3ddc6","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:33:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c1268c5-485c-43d7-aa1f-040be893c390","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"975ceff4-017a-4661-b658-6fdfde0b4699","method":"POST","path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223181,"nanos":913541697},"http":{"id":"975ceff4-017a-4661-b658-6fdfde0b4699","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-142C8go98WUMHmHyb_AFyIn18zJMhBE8wNipbc262r19qbJKGBMd3Xp13cNFX"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-142C8go98WUMHmHyb_AFyIn18zJMhBE8wNipbc262r19qbJKGBMd3Xp13cNFX\"}"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","keyName":"e2e-rate-a-a3ddc6","subscription":"e2e-rate-iso-a-a3ddc6","tenant":"e2e-shared-a-b44c0f","userId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\",\"requestedSubscription\":\"e2e-rate-iso-a-a3ddc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3ddc6","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3ddc6"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","keyName":"e2e-rate-a-a3ddc6","selected_subscription":"e2e-rate-iso-a-a3ddc6","selected_subscription_key":"ai-tenant-e2e-shared-a-b44c0f/e2e-rate-iso-a-a3ddc6@ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3ddc6","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:33:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"975ceff4-017a-4661-b658-6fdfde0b4699","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","method":"POST","path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions","host":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:57748","PortSpecifier":{"PortValue":57748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223182,"nanos":952822374},"http":{"id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","method":"POST","headers":{":authority":"e2e-shared-a-b44c0f.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-142C8go98WUMHmHyb_AFyIn18zJMhBE8wNipbc262r19qbJKGBMd3Xp13cNFX"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-142C8go98WUMHmHyb_AFyIn18zJMhBE8wNipbc262r19qbJKGBMd3Xp13cNFX\"}"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","keyName":"e2e-rate-a-a3ddc6","subscription":"e2e-rate-iso-a-a3ddc6","tenant":"e2e-shared-a-b44c0f","userId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\",\"requestedSubscription\":\"e2e-rate-iso-a-a3ddc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-b44c0f.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3ddc6","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-b44c0f/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3ddc6"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"59b675bb-89e7-4de4-9f40-24cb381c5c34","keyName":"e2e-rate-a-a3ddc6","selected_subscription":"e2e-rate-iso-a-a3ddc6","selected_subscription_key":"ai-tenant-e2e-shared-a-b44c0f/e2e-rate-iso-a-a3ddc6@ai-tenant-e2e-shared-a-b44c0f/rate-test-model-b44c0f","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b44c0f","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3ddc6","namespace":"ai-tenant-e2e-shared-a-b44c0f","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82e08ee3-0431-46f0-bc8c-e4cde5775bc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56962","PortSpecifier":{"PortValue":56962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","method":"POST","path":"/ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22/v1/completions","host":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56962","PortSpecifier":{"PortValue":56962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784223182,"nanos":987921950},"http":{"id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","method":"POST","headers":{":authority":"e2e-shared-b-8d3a22.apps.7edb8cd0-963c-443d-9ffd-ba81ec74d030.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WsjRKycClYVChYIM_sd93NmtGAMaOLUdqQNpP0HOMwZ4q1l5ukW5bSDrzVuJ"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WsjRKycClYVChYIM_sd93NmtGAMaOLUdqQNpP0HOMwZ4q1l5ukW5bSDrzVuJ\"}"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de5bda96-9294-427f-9196-bd6419c421cc","keyName":"e2e-rate-b-a3ddc6","subscription":"e2e-rate-iso-b-a3ddc6","tenant":"e2e-shared-b-8d3a22","userId":"de5bda96-9294-427f-9196-bd6419c421cc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22\",\"requestedSubscription\":\"e2e-rate-iso-b-a3ddc6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-8d3a22.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8d3a22","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3ddc6","namespace":"ai-tenant-e2e-shared-b-8d3a22","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-8d3a22/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a3ddc6"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"de5bda96-9294-427f-9196-bd6419c421cc","keyName":"e2e-rate-b-a3ddc6","selected_subscription":"e2e-rate-iso-b-a3ddc6","selected_subscription_key":"ai-tenant-e2e-shared-b-8d3a22/e2e-rate-iso-b-a3ddc6@ai-tenant-e2e-shared-b-8d3a22/rate-test-model-8d3a22","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8d3a22","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3ddc6","namespace":"ai-tenant-e2e-shared-b-8d3a22","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T17:33:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa540848-fdfc-4c87-ae8e-612b1ec3535c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c52e8aebdf577e8b5a137068f3f73c67390068baf76e970a9d70947e631c914"} {"level":"info","ts":"2026-07-16T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad67aead6f4e66518102b5c35f46d6a5809718608bb837970d463ad129f05307"} {"level":"info","ts":"2026-07-16T17:33:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc07510ec1b5fccd4b0c746b417b544a7e35174da57192e6874d2f57dfe81bf8"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ece3a1b1dbbd99144fc9e6c5e2c49da04c288fe1e49893815d9cd492cf2601a6"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38bd22f38df40dcec1b059857fd4f315950c3a3bde8d0cfc8d97fe9d59ab2804"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/641a0541b60025ba8cd38fdb4dcb6600ae599ada01af89009bd3d2c8107190ba"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ec382a419beedba7c9cc8406997e47e25046dfee5c378fc44f95776ce7aac6"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7751b7d26153cb98e3e558189d56ac50c55c83208e61dcb60224f048d5b8c086"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fcc758a5abe511ae235bbeeccde965216e895ac7ad419a17b56ad0f34b249c0a"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/709bdbce017bb3dddccd5622affd46d9e7cde83cc9088a1766504e5ec23cafff"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a47e8278c463d7562e7ee9c2ea1ceb6ec47466ab69d6e9ad55d8ff32557c9d43"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c18c13d86abf4afffbeee3374db57be5d70e8e4741ced05599af2bb06ba7564d"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf64b67b15eff727e61d1f44f7d48e467ea5261ae2a226aa3e8acf8f1a929bb8"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c48ec0bddddb52b894d8a3c77d762d3b81ffee0aab4766e1272bb10b74f96b6a"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e82071f5b8ca8f29e0b4695a583ea3a3360e462116572f36d20a11fdcaf607c4"} {"level":"info","ts":"2026-07-16T17:33:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c9443b5be53a59e2ee5b397d6fe373c27f2261af49c27b6b95ae7b51890fefc"} {"level":"info","ts":"2026-07-16T17:33:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a34ef949cdd931e642f55191f6e4776798dafd66c240fc778dd546a2155da087"} {"level":"info","ts":"2026-07-16T17:33:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd89c5f7cf13993a386c82c5318f052ec2eacbcb81783e01f3097a9e4a17e470"} {"level":"info","ts":"2026-07-16T17:33:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/606a51996c7615027612902ec737129f067b1f8699d2c637ba0e7cb2aaefc341"} {"level":"info","ts":"2026-07-16T17:33:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11dfea7bec6f8f7e0f961a93da82a7c229901439cfa116b993829d81ae607842"} {"level":"info","ts":"2026-07-16T17:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1f7dd44dfbb02079c1bb05561a31ada22ff59ecb5dc26a0afa99c8b8609e66d"} {"level":"info","ts":"2026-07-16T17:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fd224fae193d69675c37761abf08222fc1290739675f75d046f9fd57e646d37"} {"level":"info","ts":"2026-07-16T17:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52b71b82447b11872b2744a8f40ee9bc3503740c9b25070d4374bd8e60dec624"} {"level":"info","ts":"2026-07-16T17:33:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1dc9f9aeb9f94fb97465ed11111590e17f488c7cdf7f7369efe8df188496e300"}