--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397"}
{"level":"info","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:51:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"}
{"level":"error","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:51:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9"}
{"level":"info","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"info","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37992","PortSpecifier":{"PortValue":37992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37992","PortSpecifier":{"PortValue":37992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734725,"nanos":972205417},"http":{"id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16bb8fc6-163e-4c5a-86bd-82771acffeac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36836","PortSpecifier":{"PortValue":36836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73c7112c-5488-46fc-bae2-2c6208cf5880","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36836","PortSpecifier":{"PortValue":36836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734726,"nanos":33749796},"http":{"id":"73c7112c-5488-46fc-bae2-2c6208cf5880","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73c7112c-5488-46fc-bae2-2c6208cf5880","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37994","PortSpecifier":{"PortValue":37994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","method":"GET","path":"/maas-api/v1/api-keys/1996dd78-ec74-4933-8fa6-7f2dd686ca92","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37994","PortSpecifier":{"PortValue":37994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734726,"nanos":109146726},"http":{"id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","method":"GET","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1996dd78-ec74-4933-8fa6-7f2dd686ca92",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1996dd78-ec74-4933-8fa6-7f2dd686ca92",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d33b0f-95c4-49f6-a1ae-64d2156718cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36840","PortSpecifier":{"PortValue":36840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","method":"GET","path":"/maas-api/v1/api-keys/7dc928c4-3736-4c61-8452-9be05f4b3cf4","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36840","PortSpecifier":{"PortValue":36840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734726,"nanos":148477795},"http":{"id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","method":"GET","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7dc928c4-3736-4c61-8452-9be05f4b3cf4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7dc928c4-3736-4c61-8452-9be05f4b3cf4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06a76113-9a4d-42d4-bd6c-acd0678c7e01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53328","PortSpecifier":{"PortValue":53328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e416314-d7ce-45af-b447-2bc259a453c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53328","PortSpecifier":{"PortValue":53328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734745,"nanos":342027934},"http":{"id":"0e416314-d7ce-45af-b447-2bc259a453c8","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e416314-d7ce-45af-b447-2bc259a453c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47244","PortSpecifier":{"PortValue":47244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90958166-ff3e-4704-8935-6c6269e9fbf1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:47244","PortSpecifier":{"PortValue":47244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734745,"nanos":393394238},"http":{"id":"90958166-ff3e-4704-8935-6c6269e9fbf1","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90958166-ff3e-4704-8935-6c6269e9fbf1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734745,"nanos":434300432},"http":{"id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","method":"GET","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6qUkchZcpmqAi1kD_motQDEIsv4dDdsAChzTmmneMmp8xIAryqOBaAue1AQg"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6qUkchZcpmqAi1kD_motQDEIsv4dDdsAChzTmmneMmp8xIAryqOBaAue1AQg\"}"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"191ebf24-35dd-425b-be55-f39bbcd0aff2","keyName":"e2e-auth-iso-a-cc0775","subscription":"e2e-auth-iso-0152db","tenant":"e2e-shared-a-696ed9","userId":"191ebf24-35dd-425b-be55-f39bbcd0aff2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0152db"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce4a82ec-6fe7-40f5-a88c-8105d2ca3d38","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33268","PortSpecifier":{"PortValue":33268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f683567f-698d-4f53-8750-2d7d1511b6d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33268","PortSpecifier":{"PortValue":33268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734762,"nanos":526830966},"http":{"id":"f683567f-698d-4f53-8750-2d7d1511b6d3","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f683567f-698d-4f53-8750-2d7d1511b6d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54908","PortSpecifier":{"PortValue":54908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a9141558-7e83-44ae-b7b6-e8704e180c27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54908","PortSpecifier":{"PortValue":54908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734762,"nanos":567576824},"http":{"id":"a9141558-7e83-44ae-b7b6-e8704e180c27","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a9141558-7e83-44ae-b7b6-e8704e180c27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34939a0a-2a40-4972-95ad-65937e827795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54920","PortSpecifier":{"PortValue":54920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34939a0a-2a40-4972-95ad-65937e827795","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34939a0a-2a40-4972-95ad-65937e827795","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54920","PortSpecifier":{"PortValue":54920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734762,"nanos":604906614},"http":{"id":"34939a0a-2a40-4972-95ad-65937e827795","method":"GET","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WSgAk1yYEuBYE1LK_1UpTUgDEuXhgZVclEvmMenFzGIyy5kJW9d6R7ZoA96U"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WSgAk1yYEuBYE1LK_1UpTUgDEuXhgZVclEvmMenFzGIyy5kJW9d6R7ZoA96U\"}"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34939a0a-2a40-4972-95ad-65937e827795","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"34939a0a-2a40-4972-95ad-65937e827795","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":null}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34939a0a-2a40-4972-95ad-65937e827795","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34939a0a-2a40-4972-95ad-65937e827795","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34939a0a-2a40-4972-95ad-65937e827795","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38932","PortSpecifier":{"PortValue":38932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38932","PortSpecifier":{"PortValue":38932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734779,"nanos":713254134},"http":{"id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"840d249d-b92b-4250-ad6a-a7f4c03bb780","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734779,"nanos":748973499},"http":{"id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd8a9c1d-47bb-4382-bf0a-530ad32b191e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38936","PortSpecifier":{"PortValue":38936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38936","PortSpecifier":{"PortValue":38936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734779,"nanos":785081875},"http":{"id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28f81eb2-c8e3-474b-9101-ba1d8d5c8054","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734779,"nanos":819323834},"http":{"id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:52:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdc6c253-808d-492c-a55a-5f51aecd8d4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54224","PortSpecifier":{"PortValue":54224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54224","PortSpecifier":{"PortValue":54224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734801,"nanos":76866646},"http":{"id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11352079-c736-4fdb-8aae-7ec2c0f3901f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50852","PortSpecifier":{"PortValue":50852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d73cce88-f181-42a9-9abd-8e10604789c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50852","PortSpecifier":{"PortValue":50852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734801,"nanos":112429256},"http":{"id":"d73cce88-f181-42a9-9abd-8e10604789c5","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d73cce88-f181-42a9-9abd-8e10604789c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50868","PortSpecifier":{"PortValue":50868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","method":"GET","path":"/maas-api/v1/api-keys/91c88b9d-df1c-4ee4-9c5a-827e69206593","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50868","PortSpecifier":{"PortValue":50868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734801,"nanos":144639005},"http":{"id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","method":"GET","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91c88b9d-df1c-4ee4-9c5a-827e69206593",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91c88b9d-df1c-4ee4-9c5a-827e69206593",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a01ba48e-08dc-4cd5-9724-44cb9e08a8f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54236","PortSpecifier":{"PortValue":54236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","method":"GET","path":"/maas-api/v1/api-keys/91c88b9d-df1c-4ee4-9c5a-827e69206593","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:54236","PortSpecifier":{"PortValue":54236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734801,"nanos":181488343},"http":{"id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","method":"GET","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91c88b9d-df1c-4ee4-9c5a-827e69206593",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91c88b9d-df1c-4ee4-9c5a-827e69206593",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03f91e1c-3436-4f73-8a84-1de4917cb6aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55412","PortSpecifier":{"PortValue":55412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55412","PortSpecifier":{"PortValue":55412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734818,"nanos":161327937},"http":{"id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2474aeee-5185-4ccc-8f51-5b3c4c9da2de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39146","PortSpecifier":{"PortValue":39146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39146","PortSpecifier":{"PortValue":39146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734818,"nanos":193858380},"http":{"id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/auth-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ccbf7e0-e034-4a97-8a67-9ffbf11a3752","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55418","PortSpecifier":{"PortValue":55418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:55418","PortSpecifier":{"PortValue":55418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734818,"nanos":226001561},"http":{"id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14O6bOmFUuFPTd7L5_XSuwKJdgmljUZanMfqLWVjJjzORWCSZQPrGYcMnq1O3"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14O6bOmFUuFPTd7L5_XSuwKJdgmljUZanMfqLWVjJjzORWCSZQPrGYcMnq1O3\"}"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45a2c825-5f6f-4f69-b3d6-4422d616d9fb","keyName":"e2e-auth-iso-a-3afed5","subscription":"e2e-auth-iso-b098dc","tenant":"e2e-shared-a-696ed9","userId":"45a2c825-5f6f-4f69-b3d6-4422d616d9fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/auth-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b098dc"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:53:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3abc153-1b2c-40ae-a6fb-ac63389979df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f007ff86f475dd6bed8bb8bcdb3d8946b3b35723f7c8e3d98c20af124df86158"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/694b3b360d9f76bce9985a58315846ef7fab71f509a9486c0c2d29362a06677f"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1240c8a634f006bc25bc01e0f3b8673c1aaec7d5798d7a3ea97a667bb72fd081"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08177dbee64da1d22c1c8f4a1e70b04e5ff9e75fe6d4a23861f7869b16972397"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c03761291ff9d7d016a27ae20d921b2ddbf71b698f1ef53beb9c439232e3d5d6"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dddabc00c892dd3bf361f193ae1bd5a40d62f07c10543069a01fd2a0614bbaea"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/589be48948aaaf523d349971452c5569f9c6b6adf31dddc162ef10b35f73b363"}
{"level":"info","ts":"2026-07-11T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81601a408ebf337169fdb655f40632dafdffa3289027cb2d96d974586be6946a"}
{"level":"info","ts":"2026-07-11T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db37129058afab5f4f5c14222f19f0a7a8871c383a267f7ea462ac54662aca7c"}
{"level":"info","ts":"2026-07-11T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e19a002ad8be04c344334ab21ec341d57c97bdd0fb160bc75787e98dfea01792"}
{"level":"info","ts":"2026-07-11T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33be0baf96b58508a4a8a3de86f375d5f3ac2b1977858ab66ba12a0db4a6e8de"}
{"level":"info","ts":"2026-07-11T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cc54936572142be5b39f5cdb67682929c00236cc3bdaf9f28ce04a56854fd57"}
{"level":"info","ts":"2026-07-11T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56b27b0e3ba0828426635a5397e5d7027912dcc02f75c4a5cc7c333dccd7bd6a"}
{"level":"info","ts":"2026-07-11T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf63c0800d001bff205f55d649c0fd770524f1610b905f71168908a2464583f9"}
{"level":"info","ts":"2026-07-11T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52100149bedf088d3f72bbf47ea26cf7e1598d22dded7499f5a056cf15f971bd"}
{"level":"info","ts":"2026-07-11T01:53:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a27a3d032f4c08c06d4304164d503289c968cd7f3fbc0df44ec771a85c2028dd"}
{"level":"debug","ts":"2026-07-11T01:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"error","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11"}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11"}
{"level":"debug","ts":"2026-07-11T01:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"}
{"level":"info","ts":"2026-07-11T01:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"error","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879"}
{"level":"error","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"error","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b"}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"info","ts":"2026-07-11T01:54:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"info","ts":"2026-07-11T01:54:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52686","PortSpecifier":{"PortValue":52686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b551980f-ab7e-42f9-935f-22b4cda1228e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52686","PortSpecifier":{"PortValue":52686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734894,"nanos":79373356},"http":{"id":"b551980f-ab7e-42f9-935f-22b4cda1228e","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b551980f-ab7e-42f9-935f-22b4cda1228e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43344","PortSpecifier":{"PortValue":43344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43344","PortSpecifier":{"PortValue":43344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734894,"nanos":119624802},"http":{"id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9ed1f96-a80c-4bf9-a8b0-10cbe4864100","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52700","PortSpecifier":{"PortValue":52700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:52700","PortSpecifier":{"PortValue":52700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734894,"nanos":158881906},"http":{"id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","method":"GET","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PyHsaSWbdsFgS6jX_BUcc7pfyfqsrSlUFvC63WOoXUh96hlfxNAqrZSBkjts"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PyHsaSWbdsFgS6jX_BUcc7pfyfqsrSlUFvC63WOoXUh96hlfxNAqrZSBkjts\"}"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8e4e1407-e67b-4385-b1d3-10783c24ce35","keyName":"e2e-sub-iso-74b3e6","subscription":"e2e-a-only-70964c","tenant":"e2e-shared-a-696ed9","userId":"8e4e1407-e67b-4385-b1d3-10783c24ce35","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-70964c"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd2d91e-e47a-4143-8d45-72e730853cb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43352","PortSpecifier":{"PortValue":43352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43352","PortSpecifier":{"PortValue":43352}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734894,"nanos":204608777},"http":{"id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","method":"GET","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jFqlwA2gUd2cQhYF_i2sFGQ5YKFzb8zalwaT5lcqNX5ZQKrsS8Tsra61UsDM"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jFqlwA2gUd2cQhYF_i2sFGQ5YKFzb8zalwaT5lcqNX5ZQKrsS8Tsra61UsDM\"}"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fa8c791d-a95b-4ffe-95a8-1c427bb9a280","keyName":"e2e-sub-iso-d45816","subscription":"e2e-b-only-70964c","tenant":"e2e-shared-b-98dbcb","userId":"fa8c791d-a95b-4ffe-95a8-1c427bb9a280","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-70964c"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:54:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa36767-39be-485f-b4a6-0e8ece1369fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff897249-22c3-4001-9082-284c88591a41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43838","PortSpecifier":{"PortValue":43838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff897249-22c3-4001-9082-284c88591a41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff897249-22c3-4001-9082-284c88591a41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43838","PortSpecifier":{"PortValue":43838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734904,"nanos":46279771},"http":{"id":"ff897249-22c3-4001-9082-284c88591a41","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff897249-22c3-4001-9082-284c88591a41","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff897249-22c3-4001-9082-284c88591a41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"ff897249-22c3-4001-9082-284c88591a41","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff897249-22c3-4001-9082-284c88591a41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff897249-22c3-4001-9082-284c88591a41","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff897249-22c3-4001-9082-284c88591a41","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42660","PortSpecifier":{"PortValue":42660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42660","PortSpecifier":{"PortValue":42660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734904,"nanos":91968338},"http":{"id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1c53f558-e6ca-4967-9be1-4f0640e3d297","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43854","PortSpecifier":{"PortValue":43854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:43854","PortSpecifier":{"PortValue":43854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734904,"nanos":146737078},"http":{"id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RdjG6rMNFVvZgmtT_2NaSJx0hRS7dBzDrKcxftcBVH1dT4mrYiGvYbSiu7No"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RdjG6rMNFVvZgmtT_2NaSJx0hRS7dBzDrKcxftcBVH1dT4mrYiGvYbSiu7No\"}"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e560d70-294c-496b-abb2-9d35d074368f","keyName":"e2e-sub-iso-49f4cc","subscription":"e2e-shared-sub-83b388","tenant":"e2e-shared-a-696ed9","userId":"0e560d70-294c-496b-abb2-9d35d074368f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/sub-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-83b388"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75faf7fd-c865-48bb-a02c-7d3ff43ce547","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42662","PortSpecifier":{"PortValue":42662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1bc2914b-e646-4f98-989d-535aea2cc71d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42662","PortSpecifier":{"PortValue":42662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734904,"nanos":175646311},"http":{"id":"1bc2914b-e646-4f98-989d-535aea2cc71d","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BQRzLUJDp7h98h0d_WOsingsletO6sKnVrqkrUfHji8C6SK8YWc6rW0xEla6"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BQRzLUJDp7h98h0d_WOsingsletO6sKnVrqkrUfHji8C6SK8YWc6rW0xEla6\"}"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de409b2d-0801-4f77-9899-1712d91e1325","keyName":"e2e-sub-iso-07a6b2","subscription":"e2e-shared-sub-83b388","tenant":"e2e-shared-b-98dbcb","userId":"de409b2d-0801-4f77-9899-1712d91e1325","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/sub-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-83b388"}
{"level":"info","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1bc2914b-e646-4f98-989d-535aea2cc71d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dbe617782226f8e6cc39918af869a3841a65912d74274fb3e3cf69b64be908b"}
{"level":"info","ts":"2026-07-11T01:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/daa43b41b8829108bb0484a6bad8d0db5ac28389c319d8c23df53f7579d94e39"}
{"level":"info","ts":"2026-07-11T01:55:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84c3ae2b83de82bc24e71031a30f0f675f8017a837cd6d13f46c5c0347835da2"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39d22206c0d34d88fac43293c227acd00798e7a2a17afaf0c24c9174c33eec33"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e69415f7169ab93b9189a3a6b5c7d9419f89dee7152c260e596c44a980352500"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58215892860afea4df8f55a9de2865c0230b01313c9f8c381a96738313a93f08"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5ff29e5e9a3e26c33c7e1d6be60632581058cd12be92dd48fe172f30c639456"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4837c8c8dcc170c0fd1bd4cf2efbdda7b2c4b1ba07dfcf1645f36f1c169e879"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f07af571472d5514fad54b8d9ea675905f8e48d08bb93a77c895d190c4452a11"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29288421708021f5ff5856046bc165625dc90133cfd0e7c08653c5ae75941e9c"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03abd254c9eba18fb118812cdfc4297aba22a48566101b46026a0d7449066b0f"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5cb0e9596c7bbeceb41ce9c8561aa2690b6e9db7936d70820399c80ebdadea"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79cb81a35935331315dab065193e87f5710283ebc558b9eeee6481ff77952e9d"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43bbfdc941648fd75666f8be889e1fdf931353d67d72c26945e66041705e7a38"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfdb17d2db899a97667a39fe7cc19932df2c9126fa6496ed5382e342525d057c"}
{"level":"info","ts":"2026-07-11T01:55:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be03586efb08a23493ef790681fe7ea2c71e6ac73faac30be46a5ec45f46b6ee"}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"error","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:55:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"info","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"debug","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"debug","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:55:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:55:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:55:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"debug","ts":"2026-07-11T01:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-11T01:56:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}
{"level":"error","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"}
{"level":"debug","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"info","ts":"2026-07-11T01:56:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58364","PortSpecifier":{"PortValue":58364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4f947d6-0c41-43f9-a919-289cf8614605","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58364","PortSpecifier":{"PortValue":58364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734999,"nanos":553881665},"http":{"id":"c4f947d6-0c41-43f9-a919-289cf8614605","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4f947d6-0c41-43f9-a919-289cf8614605","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37230","PortSpecifier":{"PortValue":37230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82b29238-ca07-4141-9e2a-82b42e0a32da","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:37230","PortSpecifier":{"PortValue":37230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734999,"nanos":601233243},"http":{"id":"82b29238-ca07-4141-9e2a-82b42e0a32da","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82b29238-ca07-4141-9e2a-82b42e0a32da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"226812c7-6259-4cea-8539-06fa2aa388ec","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58366","PortSpecifier":{"PortValue":58366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783734999,"nanos":639245814},"http":{"id":"226812c7-6259-4cea-8539-06fa2aa388ec","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","subscription":"e2e-rate-iso-a-6516e9","tenant":"e2e-shared-a-696ed9","userId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-6516e9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6516e9"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","selected_subscription":"e2e-rate-iso-a-6516e9","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-6516e9@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"226812c7-6259-4cea-8539-06fa2aa388ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58372","PortSpecifier":{"PortValue":58372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"119eb6f9-f34f-4565-8850-ea10faecff48","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58372","PortSpecifier":{"PortValue":58372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735000,"nanos":702028797},"http":{"id":"119eb6f9-f34f-4565-8850-ea10faecff48","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","subscription":"e2e-rate-iso-a-6516e9","tenant":"e2e-shared-a-696ed9","userId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-6516e9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6516e9"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","selected_subscription":"e2e-rate-iso-a-6516e9","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-6516e9@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"119eb6f9-f34f-4565-8850-ea10faecff48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58384","PortSpecifier":{"PortValue":58384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ed84847-f11c-4fcd-9790-224a594c4d65","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58384","PortSpecifier":{"PortValue":58384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735001,"nanos":739178717},"http":{"id":"3ed84847-f11c-4fcd-9790-224a594c4d65","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1PGPJ2kRHSBFTPPES_4g2GoJ798pW4kzLr15iGtrxNK36HMWYILivaPpEHdZ6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","subscription":"e2e-rate-iso-a-6516e9","tenant":"e2e-shared-a-696ed9","userId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-6516e9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6516e9"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"aa3bc34b-78df-4b05-b055-8d3a7fd6c227","keyName":"e2e-rate-a-6516e9","selected_subscription":"e2e-rate-iso-a-6516e9","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-6516e9@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6516e9","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ed84847-f11c-4fcd-9790-224a594c4d65","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51348","PortSpecifier":{"PortValue":51348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51348","PortSpecifier":{"PortValue":51348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735012,"nanos":475540728},"http":{"id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd400bf1-3cb8-45a1-a0ab-78418adaf6f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48790","PortSpecifier":{"PortValue":48790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48790","PortSpecifier":{"PortValue":48790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735012,"nanos":513891072},"http":{"id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"]}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a69ad415a1bd"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=764696e5-d2bd-4657-8d50-4943b7c8938f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"56a55c2f-6aef-4846-a5eb-7b3765d9472b","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59254222-509e-48b1-8f9d-caa9f4bc7c5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51354","PortSpecifier":{"PortValue":51354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51354","PortSpecifier":{"PortValue":51354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735012,"nanos":544549839},"http":{"id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","subscription":"e2e-rate-iso-a-c4233f","tenant":"e2e-shared-a-696ed9","userId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","selected_subscription":"e2e-rate-iso-a-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-c4233f@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4fbab14a-72a6-4fc4-8077-986405ddba0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51368","PortSpecifier":{"PortValue":51368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51368","PortSpecifier":{"PortValue":51368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735013,"nanos":588817051},"http":{"id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","subscription":"e2e-rate-iso-a-c4233f","tenant":"e2e-shared-a-696ed9","userId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","selected_subscription":"e2e-rate-iso-a-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-c4233f@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e80a15c-5ea8-46a2-b227-acb91416a2bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51378","PortSpecifier":{"PortValue":51378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f436534-1aea-43c5-88ee-555eb179b1c7","method":"POST","path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions","host":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:51378","PortSpecifier":{"PortValue":51378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735014,"nanos":622501344},"http":{"id":"1f436534-1aea-43c5-88ee-555eb179b1c7","method":"POST","headers":{":authority":"e2e-shared-a-696ed9.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-itjgyrvW7VSqvEDb_or0TomkOxfHDr56Eh2GFnZ4uuczNUvfn2lOIpI3hpO6\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","subscription":"e2e-rate-iso-a-c4233f","tenant":"e2e-shared-a-696ed9","userId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\",\"requestedSubscription\":\"e2e-rate-iso-a-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 222, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-696ed9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-a-696ed9/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3da2a6e7-883e-445f-90ae-26548ee14d6d","keyName":"e2e-rate-a-c4233f","selected_subscription":"e2e-rate-iso-a-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-a-696ed9/e2e-rate-iso-a-c4233f@ai-tenant-e2e-shared-a-696ed9/rate-test-model-696ed9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-696ed9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c4233f","namespace":"ai-tenant-e2e-shared-a-696ed9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f436534-1aea-43c5-88ee-555eb179b1c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48804","PortSpecifier":{"PortValue":48804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6d9561f-f81c-4426-9d9e-78d886f918be","method":"POST","path":"/ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb/v1/completions","host":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:48804","PortSpecifier":{"PortValue":48804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783735014,"nanos":657348932},"http":{"id":"c6d9561f-f81c-4426-9d9e-78d886f918be","method":"POST","headers":{":authority":"e2e-shared-b-98dbcb.apps.65c42d16-df25-45ac-b42b-a69ad415a1bd.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TESReuCd3UhWZCSX_9UvNexDFpd1M8DQ1CuHxqQ5iuUNYfiKn3YeWJrfp1sz"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TESReuCd3UhWZCSX_9UvNexDFpd1M8DQ1CuHxqQ5iuUNYfiKn3YeWJrfp1sz\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"74f847a7-8d40-4349-8bca-8cee3341ebac","keyName":"e2e-rate-b-c4233f","subscription":"e2e-rate-iso-b-c4233f","tenant":"e2e-shared-b-98dbcb","userId":"74f847a7-8d40-4349-8bca-8cee3341ebac","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\",\"requestedSubscription\":\"e2e-rate-iso-b-c4233f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"unable to store data in the cache","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":"subscription-info","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 224, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-98dbcb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-98dbcb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4233f","namespace":"ai-tenant-e2e-shared-b-98dbcb","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.subscription : (\"x-maas-subscription\" in request.headers ? request.headers[\"x-maas-subscription\"] : \"\")) + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"unable to store data in the cache","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","err":"size of key: ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.userId : (has(auth.identity.preferred_username) ? auth.identity.preferred_username : (has(auth.identity.sub) ? auth.identity.sub : auth.identity.user.username))) + \"|\" + ((has(auth.metadata) && has(auth.metadata.apiKeyValidation)) ? auth.metadata.apiKeyValidation.groups : (has(auth.identity.groups) ? auth.identity.groups : auth.identity.user.groups)).join(\",\") + \"|\" + (size(request.path.split(\"/\").filter(x, x != \"\")) >= 2 && request.path.split(\"/\").filter(x, x != \"\")[0] != \"v1\" && request.path.split(\"/\").filter(x, x != \"\")[0] != \"maas-api\" ? request.path.split(\"/\").filter(x, x != \"\")[0] + \"/\" + request.path.split(\"/\").filter(x, x != \"\")[1] : (\"x-gateway-model-name\" in request.headers   ? (request.headers[\"x-gateway-model-name\"].startsWith(\"publishers/\")     ? (request.headers[\"x-gateway-model-name\"] in  ? [request.headers[\"x-gateway-model-name\"]] : request.headers[\"x-gateway-model-name\"])     : request.headers[\"x-gateway-model-name\"])   : \"\")), value: 14, err: The entry size is larger than 1/1024 of cache size"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\npublisher_to_identity := {\"publishers/ai-tenant-e2e-shared-b-98dbcb/models/facebook/opt-125m\":\"ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb\"}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := publisher_to_identity[raw_header_model_identity] {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c4233f"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"74f847a7-8d40-4349-8bca-8cee3341ebac","keyName":"e2e-rate-b-c4233f","selected_subscription":"e2e-rate-iso-b-c4233f","selected_subscription_key":"ai-tenant-e2e-shared-b-98dbcb/e2e-rate-iso-b-c4233f@ai-tenant-e2e-shared-b-98dbcb/rate-test-model-98dbcb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-98dbcb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c4233f","namespace":"ai-tenant-e2e-shared-b-98dbcb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-11T01:56:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6d9561f-f81c-4426-9d9e-78d886f918be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df49f5c26adc80389c32df10797b21eabf65ea864281f5d840e70280bfe85055"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da1c178b574e7efe3666399882541151ec2724703a6e9e5759b02d9e692dae26"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/140110e4f7c4937efc6fc7655fe17dff87364bdc8e62a44fb429f81f7079af65"}
{"level":"info","ts":"2026-07-11T01:57:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba61932fc94c3c295858f8bb1593dd05f6dbc93658dd22356f541548e5bb79c0"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67887836e582a519d75fc306bac829e74474824b1b36677e346f8fdf217142da"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71e93082b20d28f3d5fadb85740ebd69de53ab8444f6885926c62a1f724d70b7"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1a78b7d49abc06feb3eadcb70ce0db811314eda97761726547483d6270dcb71"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/20b9d689d66cbd2fe695f1c6fbd542e60af8e5057fea50ebb10fb8d6ce080292"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/660c9a171ac09b9261770ffc7e5c3bc76fd6e770ae78c6f7842d327644432c65"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35b0847c634db106d8b8b889a03e9358ddc7315dceda7a20e793bd594cc38bf4"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a449fb3a3ece6741eab19f073e0ff8cae2cd1bd34f8d739ee6f647c2fd28b4e"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41b67fc10b07d827cf04a2435f49ee2fb0c218e2a46c36fc21bfbfa848f5cf33"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/043a6a6fcaadf4bb76c789493690fac665f747bd72393ab2206bed7d708c1321"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be1239f1e79e2e547f9e4a199fe665705a0b2d5d575361e118d1ec0dcb7fa85c"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f52ed3e1031574eb05f2e2e11b7132af1631057c447a9d02925b5e64f55d724e"}
{"level":"info","ts":"2026-07-11T01:57:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e46f54b4521f49775776fdf16f91da1a880e5c28c443288cbd522256369f8d8"}
{"level":"info","ts":"2026-07-11T01:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b89c7c5a762851fbe89d17d83258fdde1b0cf31418436abd972e4b462b56af"}
{"level":"info","ts":"2026-07-11T01:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4701f905a744ef817bc0beaeb6218562951f643e9b0a4fbae09d1e0f0d19778"}
{"level":"info","ts":"2026-07-11T01:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56eb3553412f6f2f79ee58e24c3ba382441be6929ef4fb55343857cf96414a44"}
{"level":"info","ts":"2026-07-11T01:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943fe8ae945c146ef7b019d257fad52043783e4349e4f2e8b13b88ec05bfea9d"}
{"level":"info","ts":"2026-07-11T01:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acb081a09165f2f8f2a8044798e054b47142c5c6cd11dc1e8320ef106aff3877"}
{"level":"info","ts":"2026-07-11T01:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a99bdb072828888cfca5c055927f4be134f05154b298cc67231f23cd967e99d"}
{"level":"info","ts":"2026-07-11T01:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4612365c4fd985d965b66c719d1f486b80fbdcb9c5d0b0201e968daddc3c1cf2"}
{"level":"info","ts":"2026-07-11T01:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58cea32e6c74ce759b0ba97104735d9fbeb69919a85300d7bfba9d792f9e21da"}