{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d4e075e-ef42-4041-9599-524a6b264439","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d4e075e-ef42-4041-9599-524a6b264439","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d4e075e-ef42-4041-9599-524a6b264439","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d4e075e-ef42-4041-9599-524a6b264439","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d4e075e-ef42-4041-9599-524a6b264439","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781235,"nanos":936356483},"http":{"id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FdPNeTDBs3HJRGpo_YdpVqsWvIGQ649ewnm6NogiY5eP6RAdeXNLCOxt8C0c"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FdPNeTDBs3HJRGpo_YdpVqsWvIGQ649ewnm6NogiY5eP6RAdeXNLCOxt8C0c\"}"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1FdPNeTDBs3HJRGpo_YdpVqsWvIGQ649ewnm6NogiY5eP6RAdeXNLCOxt8C0c","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.31","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.31","x-forwarded-proto":"https","x-maas-subscription":"e2e-central-models-exempt-sub","x-request-id":"553c8a48-dcaa-4dd3-8278-cdd29da39578"},"host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":936356483,"seconds":1780781235},"url_path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.31:34708","port":34708}}}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a058be04-4f75-4414-bddd-3b505fef0dcc","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:27:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"553c8a48-dcaa-4dd3-8278-cdd29da39578","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"error","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-06T21:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:22810","PortSpecifier":{"PortValue":22810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:22810","PortSpecifier":{"PortValue":22810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781249,"nanos":469272622},"http":{"id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"c7f53038-8940-40ee-b2e4-6ff38a81eca6","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=387f36d9-12fc-44d3-8da5-337c1837bab1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad595f167ed7"]}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ad595f167ed7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=387f36d9-12fc-44d3-8da5-337c1837bab1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"c7f53038-8940-40ee-b2e4-6ff38a81eca6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a53cdf0-e9c2-44cc-aea8-992014023eb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"823ca4f8-b2d2-474e-9ed3-c701d977a99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4998","PortSpecifier":{"PortValue":4998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"823ca4f8-b2d2-474e-9ed3-c701d977a99b","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"823ca4f8-b2d2-474e-9ed3-c701d977a99b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4998","PortSpecifier":{"PortValue":4998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781249,"nanos":843918543},"http":{"id":"823ca4f8-b2d2-474e-9ed3-c701d977a99b","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"823ca4f8-b2d2-474e-9ed3-c701d977a99b","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"823ca4f8-b2d2-474e-9ed3-c701d977a99b","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6293360-a0c2-47c3-8232-05a5ba3138bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38382","PortSpecifier":{"PortValue":38382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6293360-a0c2-47c3-8232-05a5ba3138bc","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6293360-a0c2-47c3-8232-05a5ba3138bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38382","PortSpecifier":{"PortValue":38382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781249,"nanos":872187128},"http":{"id":"d6293360-a0c2-47c3-8232-05a5ba3138bc","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.3","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"e2e-external-model","x-request-id":"d6293360-a0c2-47c3-8232-05a5ba3138bc"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6293360-a0c2-47c3-8232-05a5ba3138bc","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6293360-a0c2-47c3-8232-05a5ba3138bc","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60212","PortSpecifier":{"PortValue":60212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60212","PortSpecifier":{"PortValue":60212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781249,"nanos":898077828},"http":{"id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8LFHpMjuHHttxCVt_mN8ypxSA52mYmFLA4TfRdrck1jQcUEcSmPB3vM7F7xd"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8LFHpMjuHHttxCVt_mN8ypxSA52mYmFLA4TfRdrck1jQcUEcSmPB3vM7F7xd\"}"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"71eb3c59-b8a7-4bca-9b19-c2be7813418a","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:27:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21a3115b-a1bf-4ef1-8258-3ce81cfab092","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:27:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-06T21:27:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-06T21:27:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-06T21:28:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-06T21:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-06T21:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-06T21:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62294563-06ec-49c7-a239-5b8263f30caf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38524","PortSpecifier":{"PortValue":38524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62294563-06ec-49c7-a239-5b8263f30caf","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62294563-06ec-49c7-a239-5b8263f30caf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38524","PortSpecifier":{"PortValue":38524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781315,"nanos":747199024},"http":{"id":"62294563-06ec-49c7-a239-5b8263f30caf","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62294563-06ec-49c7-a239-5b8263f30caf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781615,"groups":["Engineering","Project-Alpha"],"iat":1780781315,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:f54384e9-86df-0545-663e-3ac9684db08c","preferred_username":"alice_lead","scope":"profile email","sid":"LFHEAxTqkXPO4zclQjDUfYLy","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62294563-06ec-49c7-a239-5b8263f30caf","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781615,"groups":["Engineering","Project-Alpha"],"iat":1780781315,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:f54384e9-86df-0545-663e-3ac9684db08c","preferred_username":"alice_lead","scope":"profile email","sid":"LFHEAxTqkXPO4zclQjDUfYLy","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62294563-06ec-49c7-a239-5b8263f30caf","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62294563-06ec-49c7-a239-5b8263f30caf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62294563-06ec-49c7-a239-5b8263f30caf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62294563-06ec-49c7-a239-5b8263f30caf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62294563-06ec-49c7-a239-5b8263f30caf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31744","PortSpecifier":{"PortValue":31744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31744","PortSpecifier":{"PortValue":31744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781315,"nanos":857282120},"http":{"id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e383acb1-7055-4bb3-ba4d-dd067e2b2150","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70a6036e-5011-4cce-9779-8b4973fc035a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28792","PortSpecifier":{"PortValue":28792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70a6036e-5011-4cce-9779-8b4973fc035a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70a6036e-5011-4cce-9779-8b4973fc035a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28792","PortSpecifier":{"PortValue":28792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781315,"nanos":912850744},"http":{"id":"70a6036e-5011-4cce-9779-8b4973fc035a","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"70a6036e-5011-4cce-9779-8b4973fc035a"},"path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"70a6036e-5011-4cce-9779-8b4973fc035a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70a6036e-5011-4cce-9779-8b4973fc035a","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70a6036e-5011-4cce-9779-8b4973fc035a","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10200","PortSpecifier":{"PortValue":10200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10200","PortSpecifier":{"PortValue":10200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781315,"nanos":938995592},"http":{"id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc"},"path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-06T21:28:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3829dba6-9d03-4fc1-a74e-1e8b858096cc","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38538","PortSpecifier":{"PortValue":38538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38538","PortSpecifier":{"PortValue":38538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":288560577},"http":{"id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Site-Reliability"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7434b5a2-cdf0-1527-6783-70a54e54d537","preferred_username":"bob_sre","scope":"profile email","sid":"oxh7LoPslJfBCKm3Y6gxs3SS","sub":"9ec30c57-7a6e-476d-becb-79d81bd505ac","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Site-Reliability"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7434b5a2-cdf0-1527-6783-70a54e54d537","preferred_username":"bob_sre","scope":"profile email","sid":"oxh7LoPslJfBCKm3Y6gxs3SS","sub":"9ec30c57-7a6e-476d-becb-79d81bd505ac","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"20e5d438-8239-46e8-9a64-5cc57360c6c0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba6b9027-5262-4937-9de5-79977f168b60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31746","PortSpecifier":{"PortValue":31746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba6b9027-5262-4937-9de5-79977f168b60","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba6b9027-5262-4937-9de5-79977f168b60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31746","PortSpecifier":{"PortValue":31746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":514699295},"http":{"id":"ba6b9027-5262-4937-9de5-79977f168b60","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba6b9027-5262-4937-9de5-79977f168b60","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Engineering","Project-Alpha"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4e322c4d-1ad6-26d5-dfec-9996cb46882f","preferred_username":"alice_lead","scope":"profile email","sid":"8YeF_xN7WuZOZHSj--w1zCBN","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba6b9027-5262-4937-9de5-79977f168b60","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Engineering","Project-Alpha"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:4e322c4d-1ad6-26d5-dfec-9996cb46882f","preferred_username":"alice_lead","scope":"profile email","sid":"8YeF_xN7WuZOZHSj--w1zCBN","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba6b9027-5262-4937-9de5-79977f168b60","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba6b9027-5262-4937-9de5-79977f168b60","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba6b9027-5262-4937-9de5-79977f168b60","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba6b9027-5262-4937-9de5-79977f168b60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba6b9027-5262-4937-9de5-79977f168b60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28800","PortSpecifier":{"PortValue":28800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28800","PortSpecifier":{"PortValue":28800}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":544449204},"http":{"id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j\"}"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0f9236a-c861-44d6-b17b-2464a3913bc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":558740340},"http":{"id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j\"}"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.31","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtNDdtbTYKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.31","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644"},"host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":558740340,"seconds":1780781316},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.31:34708","port":34708}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"488fc106-ea47-4ed9-83fd-5fb2bf4f1140","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20ae96f-96f4-415b-8ac0-9840ff4d3644","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60378","PortSpecifier":{"PortValue":60378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60378","PortSpecifier":{"PortValue":60378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":589935706},"http":{"id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HHvNTWop6XyMccfz_qv078I7by1VzRg67sXk627K0BTsibJtfGBdHXl8ON1j\"}"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"488fc106-ea47-4ed9-83fd-5fb2bf4f1140","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d070ff86-d3a7-42d0-a9e8-f39f76db945e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38544","PortSpecifier":{"PortValue":38544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38544","PortSpecifier":{"PortValue":38544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":690385450},"http":{"id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Engineering","Project-Alpha"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e418c3eb-cab2-164e-a7d4-7fb0ee6cb22f","preferred_username":"alice_lead","scope":"profile email","sid":"VO1macPgfQD1Xbw6ODp8ZhkJ","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Engineering","Project-Alpha"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e418c3eb-cab2-164e-a7d4-7fb0ee6cb22f","preferred_username":"alice_lead","scope":"profile email","sid":"VO1macPgfQD1Xbw6ODp8ZhkJ","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf4eaf13-452f-4391-ac30-d04c6ed633bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31750","PortSpecifier":{"PortValue":31750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac5021b7-975a-403e-aed5-61be7624cd46","method":"DELETE","path":"/maas-api/v1/api-keys/ce340a12-3c11-4146-882d-2f80e5dc3c5b","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31750","PortSpecifier":{"PortValue":31750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781316,"nanos":719824470},"http":{"id":"ac5021b7-975a-403e-aed5-61be7624cd46","method":"DELETE","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/ce340a12-3c11-4146-882d-2f80e5dc3c5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Engineering","Project-Alpha"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e418c3eb-cab2-164e-a7d4-7fb0ee6cb22f","preferred_username":"alice_lead","scope":"profile email","sid":"VO1macPgfQD1Xbw6ODp8ZhkJ","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781616,"groups":["Engineering","Project-Alpha"],"iat":1780781316,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e418c3eb-cab2-164e-a7d4-7fb0ee6cb22f","preferred_username":"alice_lead","scope":"profile email","sid":"VO1macPgfQD1Xbw6ODp8ZhkJ","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/ce340a12-3c11-4146-882d-2f80e5dc3c5b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac5021b7-975a-403e-aed5-61be7624cd46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19750","PortSpecifier":{"PortValue":19750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dec296e4-059f-445b-8b28-c2f00c81e246","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19750","PortSpecifier":{"PortValue":19750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781319,"nanos":752601036},"http":{"id":"dec296e4-059f-445b-8b28-c2f00c81e246","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RonD6DDYxHLkXMEc_Yb7QHNisfZgtZcZQbTRR1PnvKY6eYuYF4B7l4ycfmUx"}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RonD6DDYxHLkXMEc_Yb7QHNisfZgtZcZQbTRR1PnvKY6eYuYF4B7l4ycfmUx\"}"}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dec296e4-059f-445b-8b28-c2f00c81e246","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63256","PortSpecifier":{"PortValue":63256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63256","PortSpecifier":{"PortValue":63256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781319,"nanos":889969702},"http":{"id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-06T21:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56eebfb4-1b27-4fc8-9974-20fbecc2e2ac","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28806","PortSpecifier":{"PortValue":28806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28806","PortSpecifier":{"PortValue":28806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":52493128},"http":{"id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781619,"groups":["Engineering","Project-Alpha"],"iat":1780781319,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:aae86d0b-269f-80e1-48e5-fecbb5c97365","preferred_username":"alice_lead","scope":"profile email","sid":"Zhf9RQTqPyQjQFdmm6lLSpgY","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781619,"groups":["Engineering","Project-Alpha"],"iat":1780781319,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:aae86d0b-269f-80e1-48e5-fecbb5c97365","preferred_username":"alice_lead","scope":"profile email","sid":"Zhf9RQTqPyQjQFdmm6lLSpgY","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31f2c622-6b95-406c-9fc8-c5fb1f18ad5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56308","PortSpecifier":{"PortValue":56308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56308","PortSpecifier":{"PortValue":56308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":80238905},"http":{"id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Site-Reliability"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:637bcedc-2598-c1fd-b656-5b883e7b68c4","preferred_username":"bob_sre","scope":"profile email","sid":"ZhzW3hz2iqnTqKi49ydiRrUV","sub":"9ec30c57-7a6e-476d-becb-79d81bd505ac","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Site-Reliability"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:637bcedc-2598-c1fd-b656-5b883e7b68c4","preferred_username":"bob_sre","scope":"profile email","sid":"ZhzW3hz2iqnTqKi49ydiRrUV","sub":"9ec30c57-7a6e-476d-becb-79d81bd505ac","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f44880c-6ae5-4034-9c6b-f18ef53e9b52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19752","PortSpecifier":{"PortValue":19752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a1505e0-cca6-437c-a88e-aeab97596a48","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19752","PortSpecifier":{"PortValue":19752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":168978516},"http":{"id":"1a1505e0-cca6-437c-a88e-aeab97596a48","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8d43d69c-263c-df48-a967-b0e24ecb925b","preferred_username":"alice_lead","scope":"profile email","sid":"0OXWTkx8LbjbXa8N783hU6Qt","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8d43d69c-263c-df48-a967-b0e24ecb925b","preferred_username":"alice_lead","scope":"profile email","sid":"0OXWTkx8LbjbXa8N783hU6Qt","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a1505e0-cca6-437c-a88e-aeab97596a48","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38556","PortSpecifier":{"PortValue":38556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30e61f24-6d71-4c0e-85ab-27741b571a09","method":"DELETE","path":"/maas-api/v1/api-keys/703b89a0-ffee-454d-9652-ca4a5f7654ff","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38556","PortSpecifier":{"PortValue":38556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":194136448},"http":{"id":"30e61f24-6d71-4c0e-85ab-27741b571a09","method":"DELETE","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/703b89a0-ffee-454d-9652-ca4a5f7654ff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8d43d69c-263c-df48-a967-b0e24ecb925b","preferred_username":"alice_lead","scope":"profile email","sid":"0OXWTkx8LbjbXa8N783hU6Qt","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8d43d69c-263c-df48-a967-b0e24ecb925b","preferred_username":"alice_lead","scope":"profile email","sid":"0OXWTkx8LbjbXa8N783hU6Qt","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/703b89a0-ffee-454d-9652-ca4a5f7654ff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30e61f24-6d71-4c0e-85ab-27741b571a09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63262","PortSpecifier":{"PortValue":63262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","method":"DELETE","path":"/maas-api/v1/api-keys/703b89a0-ffee-454d-9652-ca4a5f7654ff","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63262","PortSpecifier":{"PortValue":63262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":224432895},"http":{"id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","method":"DELETE","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/703b89a0-ffee-454d-9652-ca4a5f7654ff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8d43d69c-263c-df48-a967-b0e24ecb925b","preferred_username":"alice_lead","scope":"profile email","sid":"0OXWTkx8LbjbXa8N783hU6Qt","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8d43d69c-263c-df48-a967-b0e24ecb925b","preferred_username":"alice_lead","scope":"profile email","sid":"0OXWTkx8LbjbXa8N783hU6Qt","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/703b89a0-ffee-454d-9652-ca4a5f7654ff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"108e82a6-c8e1-4b21-b4d8-50708d42eda0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56316","PortSpecifier":{"PortValue":56316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56316","PortSpecifier":{"PortValue":56316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":318326065},"http":{"id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e05b6eef-6540-fe0c-1809-4d897c75cc6f","preferred_username":"alice_lead","scope":"profile email","sid":"f7wMXvbCy7481r1g1CWWJ4n_","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:e05b6eef-6540-fe0c-1809-4d897c75cc6f","preferred_username":"alice_lead","scope":"profile email","sid":"f7wMXvbCy7481r1g1CWWJ4n_","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6b4d1df-51d4-41ab-9049-d1e558137fbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19758","PortSpecifier":{"PortValue":19758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19758","PortSpecifier":{"PortValue":19758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":345209312},"http":{"id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-64Tfur0w8OqVFrHS_TlekYx8sQdU9rlxEkNCnuEnAMcqWgvVELR1yZgER838"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-64Tfur0w8OqVFrHS_TlekYx8sQdU9rlxEkNCnuEnAMcqWgvVELR1yZgER838\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e259c7a-98ad-48f3-89c2-a5ebe805a1c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":350468961},"http":{"id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-64Tfur0w8OqVFrHS_TlekYx8sQdU9rlxEkNCnuEnAMcqWgvVELR1yZgER838"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-64Tfur0w8OqVFrHS_TlekYx8sQdU9rlxEkNCnuEnAMcqWgvVELR1yZgER838\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-64Tfur0w8OqVFrHS_TlekYx8sQdU9rlxEkNCnuEnAMcqWgvVELR1yZgER838","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.31","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.31","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"e0112df9-0a37-4677-8382-b5bf21b63c7f"},"host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":350468961,"seconds":1780781320},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.31:34708","port":34708}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"50a8ffad-08d1-445a-a8de-8a731616423f","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0112df9-0a37-4677-8382-b5bf21b63c7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63266","PortSpecifier":{"PortValue":63266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:63266","PortSpecifier":{"PortValue":63266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":446247483},"http":{"id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8f946bcc-da2b-20f7-7ce6-f04d21b7f2e4","preferred_username":"alice_lead","scope":"profile email","sid":"9EPQNCyBe_Do9fYo6r1tbR51","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:8f946bcc-da2b-20f7-7ce6-f04d21b7f2e4","preferred_username":"alice_lead","scope":"profile email","sid":"9EPQNCyBe_Do9fYo6r1tbR51","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d752d1d-68c5-45b3-b3f7-764ba79b1b55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31756","PortSpecifier":{"PortValue":31756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee82ec9-975e-4da9-944f-ad5d329ce370","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31756","PortSpecifier":{"PortValue":31756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":473180211},"http":{"id":"dee82ec9-975e-4da9-944f-ad5d329ce370","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee82ec9-975e-4da9-944f-ad5d329ce370","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28814","PortSpecifier":{"PortValue":28814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:28814","PortSpecifier":{"PortValue":28814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":495939610},"http":{"id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c30c3ebd-4014-471e-b729-54fd3095ef4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":500981850},"http":{"id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-AxQ8eXxnhzlbERMs_av8foiP831oLfKGsOw4a7IafWrBZcX244VyeXlj12c5","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.31","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.31","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"902972ce-9d1d-4fd8-ac68-cc8f81180472"},"host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":500981850,"seconds":1780781320},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.31:34708","port":34708}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"3c2a0014-a948-4221-8318-d4868db6055e","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"902972ce-9d1d-4fd8-ac68-cc8f81180472","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56322","PortSpecifier":{"PortValue":56322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a662f95-0c89-4879-b4e7-586059ba0e93","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56322","PortSpecifier":{"PortValue":56322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":603605364},"http":{"id":"7a662f95-0c89-4879-b4e7-586059ba0e93","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:f9eeded6-3ec5-9b2f-1e3f-b4662736324c","preferred_username":"alice_lead","scope":"profile email","sid":"fSJ0rvngAP7Ap4gesmNxQEyo","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:f9eeded6-3ec5-9b2f-1e3f-b4662736324c","preferred_username":"alice_lead","scope":"profile email","sid":"fSJ0rvngAP7Ap4gesmNxQEyo","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a662f95-0c89-4879-b4e7-586059ba0e93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21df7cd1-4e4a-43f3-beba-183361848718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38564","PortSpecifier":{"PortValue":38564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21df7cd1-4e4a-43f3-beba-183361848718","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21df7cd1-4e4a-43f3-beba-183361848718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38564","PortSpecifier":{"PortValue":38564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":636276899},"http":{"id":"21df7cd1-4e4a-43f3-beba-183361848718","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21df7cd1-4e4a-43f3-beba-183361848718","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21df7cd1-4e4a-43f3-beba-183361848718","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21df7cd1-4e4a-43f3-beba-183361848718","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21df7cd1-4e4a-43f3-beba-183361848718","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21df7cd1-4e4a-43f3-beba-183361848718","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21df7cd1-4e4a-43f3-beba-183361848718","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21df7cd1-4e4a-43f3-beba-183361848718","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21df7cd1-4e4a-43f3-beba-183361848718","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21df7cd1-4e4a-43f3-beba-183361848718","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c16005-3480-4a19-9128-2270166c1cdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88c16005-3480-4a19-9128-2270166c1cdf","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88c16005-3480-4a19-9128-2270166c1cdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":642014759},"http":{"id":"88c16005-3480-4a19-9128-2270166c1cdf","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88c16005-3480-4a19-9128-2270166c1cdf","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.31","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.31","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"88c16005-3480-4a19-9128-2270166c1cdf"},"host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","id":"88c16005-3480-4a19-9128-2270166c1cdf","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":642014759,"seconds":1780781320},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.31:34708","port":34708}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88c16005-3480-4a19-9128-2270166c1cdf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"070f7bd4-cf92-49d6-821a-a4bff508d65a","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c16005-3480-4a19-9128-2270166c1cdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88c16005-3480-4a19-9128-2270166c1cdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2427400-add9-44e9-bdba-d244a02166a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19770","PortSpecifier":{"PortValue":19770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b2427400-add9-44e9-bdba-d244a02166a5","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b2427400-add9-44e9-bdba-d244a02166a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19770","PortSpecifier":{"PortValue":19770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":673123409},"http":{"id":"b2427400-add9-44e9-bdba-d244a02166a5","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b2427400-add9-44e9-bdba-d244a02166a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b2427400-add9-44e9-bdba-d244a02166a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b2427400-add9-44e9-bdba-d244a02166a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b2427400-add9-44e9-bdba-d244a02166a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2427400-add9-44e9-bdba-d244a02166a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2427400-add9-44e9-bdba-d244a02166a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b2427400-add9-44e9-bdba-d244a02166a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2427400-add9-44e9-bdba-d244a02166a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b2427400-add9-44e9-bdba-d244a02166a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:34708","PortSpecifier":{"PortValue":34708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":678293730},"http":{"id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","method":"GET","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-epzPYlcsX9nRgWuG_UmeJ729dgYUgrSOFiKm1zZ4UuXe3QmgsH3Yj6Wdkq70","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.31","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.26~maas-default-gateway-openshift-default-687ff6996-47mm6.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.31","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e"},"host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":678293730,"seconds":1780781320},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.31:34708","port":34708}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"070f7bd4-cf92-49d6-821a-a4bff508d65a","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe95d781-1ac5-4eb1-891f-13aa3d43327e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31758","PortSpecifier":{"PortValue":31758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:31758","PortSpecifier":{"PortValue":31758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.26:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780781320,"nanos":775795672},"http":{"id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","method":"POST","headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:60e9dcce-d9d6-0fda-e567-d0bbf469d2ad","preferred_username":"alice_lead","scope":"profile email","sid":"jpv_m17ElzflDVh0VWyo6LwO","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780781620,"groups":["Engineering","Project-Alpha"],"iat":1780781320,"iss":"https://keycloak.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:60e9dcce-d9d6-0fda-e567-d0bbf469d2ad","preferred_username":"alice_lead","scope":"profile email","sid":"jpv_m17ElzflDVh0VWyo6LwO","sub":"e6b267b2-f707-479a-9d96-1571ab6c7ff0","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.26:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0915a848-9120-42fd-aae9-ad595f167ed7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-06T21:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b88e2bde-3bc0-41f7-b285-35648076bcdc","authorized":true,"response":"OK"}