--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":683875684,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:21268","port":21268}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dde76e2-ec4f-49a0-8ca9-8ad9dc02ed6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22836","PortSpecifier":{"PortValue":22836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22836","PortSpecifier":{"PortValue":22836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":742811297},"http":{"id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":742811297,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:22836","port":22836}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de591cbb-936e-4451-aa35-9eaf7f4c44c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5982","PortSpecifier":{"PortValue":5982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5982","PortSpecifier":{"PortValue":5982}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":784608973},"http":{"id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":784608973,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:5982","port":5982}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"609a1918-6bd1-45a2-9e2b-113d9ce301c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:21272","PortSpecifier":{"PortValue":21272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d415019a-2422-41eb-adb6-6c089acd73a6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:21272","PortSpecifier":{"PortValue":21272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":828880744},"http":{"id":"d415019a-2422-41eb-adb6-6c089acd73a6","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d415019a-2422-41eb-adb6-6c089acd73a6"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"d415019a-2422-41eb-adb6-6c089acd73a6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":828880744,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:21272","port":21272}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d415019a-2422-41eb-adb6-6c089acd73a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:62310","PortSpecifier":{"PortValue":62310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0018456d-2e72-4fb5-bc96-9512e81c195c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:62310","PortSpecifier":{"PortValue":62310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":866519235},"http":{"id":"0018456d-2e72-4fb5-bc96-9512e81c195c","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"0018456d-2e72-4fb5-bc96-9512e81c195c"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"0018456d-2e72-4fb5-bc96-9512e81c195c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":866519235,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:62310","port":62310}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0018456d-2e72-4fb5-bc96-9512e81c195c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64e4166f-0986-4750-87b5-978b2d35e768","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43866","PortSpecifier":{"PortValue":43866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"64e4166f-0986-4750-87b5-978b2d35e768","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"64e4166f-0986-4750-87b5-978b2d35e768","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:43866","PortSpecifier":{"PortValue":43866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":903323276},"http":{"id":"64e4166f-0986-4750-87b5-978b2d35e768","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"64e4166f-0986-4750-87b5-978b2d35e768","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtN3Ria3MKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"64e4166f-0986-4750-87b5-978b2d35e768"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"64e4166f-0986-4750-87b5-978b2d35e768","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":903323276,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:43866","port":43866}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"64e4166f-0986-4750-87b5-978b2d35e768","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64e4166f-0986-4750-87b5-978b2d35e768","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"64e4166f-0986-4750-87b5-978b2d35e768","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77799752-0dd1-4e92-b910-1133b0222810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22838","PortSpecifier":{"PortValue":22838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77799752-0dd1-4e92-b910-1133b0222810","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77799752-0dd1-4e92-b910-1133b0222810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22838","PortSpecifier":{"PortValue":22838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":940419597},"http":{"id":"77799752-0dd1-4e92-b910-1133b0222810","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77799752-0dd1-4e92-b910-1133b0222810","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"77799752-0dd1-4e92-b910-1133b0222810"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"77799752-0dd1-4e92-b910-1133b0222810","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":940419597,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:22838","port":22838}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77799752-0dd1-4e92-b910-1133b0222810","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77799752-0dd1-4e92-b910-1133b0222810","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77799752-0dd1-4e92-b910-1133b0222810","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5996","PortSpecifier":{"PortValue":5996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4b94303-e899-4f74-b62e-186ce0c3368a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5996","PortSpecifier":{"PortValue":5996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015418,"nanos":975733866},"http":{"id":"d4b94303-e899-4f74-b62e-186ce0c3368a","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtN3Ria3MKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d4b94303-e899-4f74-b62e-186ce0c3368a"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"d4b94303-e899-4f74-b62e-186ce0c3368a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":975733866,"seconds":1781015418},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:5996","port":5996}}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4b94303-e899-4f74-b62e-186ce0c3368a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:21278","PortSpecifier":{"PortValue":21278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:21278","PortSpecifier":{"PortValue":21278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015419,"nanos":11934521},"http":{"id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtN3Ria3MKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"cd86c797-7619-4fa3-88a8-0362f8828ad7"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":11934521,"seconds":1781015419},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:21278","port":21278}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd86c797-7619-4fa3-88a8-0362f8828ad7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22842","PortSpecifier":{"PortValue":22842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22842","PortSpecifier":{"PortValue":22842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015419,"nanos":46540992},"http":{"id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":46540992,"seconds":1781015419},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:22842","port":22842}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2d37f85-73c5-4615-8cf2-97a06f9c7d7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5998","PortSpecifier":{"PortValue":5998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5998","PortSpecifier":{"PortValue":5998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015419,"nanos":88276393},"http":{"id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL\"}"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:maas-admin:tester-admin-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","authorization":"Bearer **** sk-oai-QV9FY7ps8aH2wM1b_rZDg6EylFpiH14rF54hvNaFIsHKFQhW3EiiuYojH2nL","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/2","scheme":"https","time":{"nanos":88276393,"seconds":1781015419},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:5998","port":5998}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:maas-admin,system:authenticated","keyId":"294695b6-a2e2-43d5-8627-a2a57a5770d9","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:maas-admin:tester-admin-user"}}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3055bc5-39a9-4f1f-8a1f-5818199e3b1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:21294","PortSpecifier":{"PortValue":21294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:21294","PortSpecifier":{"PortValue":21294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015419,"nanos":122877044},"http":{"id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7"},"path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/2"}},"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf891bf5-1d0a-44f7-9b9f-b8e9778fa7d7","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56581f05-05ab-4e2c-9814-38c66540363b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22848","PortSpecifier":{"PortValue":22848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56581f05-05ab-4e2c-9814-38c66540363b","method":"DELETE","path":"/maas-api/v1/api-keys/294695b6-a2e2-43d5-8627-a2a57a5770d9","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56581f05-05ab-4e2c-9814-38c66540363b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22848","PortSpecifier":{"PortValue":22848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015419,"nanos":150967822},"http":{"id":"56581f05-05ab-4e2c-9814-38c66540363b","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/294695b6-a2e2-43d5-8627-a2a57a5770d9",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"56581f05-05ab-4e2c-9814-38c66540363b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56581f05-05ab-4e2c-9814-38c66540363b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56581f05-05ab-4e2c-9814-38c66540363b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56581f05-05ab-4e2c-9814-38c66540363b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/294695b6-a2e2-43d5-8627-a2a57a5770d9",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"56581f05-05ab-4e2c-9814-38c66540363b"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"56581f05-05ab-4e2c-9814-38c66540363b","method":"DELETE","path":"/maas-api/v1/api-keys/294695b6-a2e2-43d5-8627-a2a57a5770d9","protocol":"HTTP/2","scheme":"https","time":{"nanos":150967822,"seconds":1781015419},"url_path":"/maas-api/v1/api-keys/294695b6-a2e2-43d5-8627-a2a57a5770d9","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.2:22848","port":22848}}}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56581f05-05ab-4e2c-9814-38c66540363b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56581f05-05ab-4e2c-9814-38c66540363b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56581f05-05ab-4e2c-9814-38c66540363b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56581f05-05ab-4e2c-9814-38c66540363b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:61916","PortSpecifier":{"PortValue":61916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","method":"GET","path":"/maas-api/v1/subscriptions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:61916","PortSpecifier":{"PortValue":61916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015426,"nanos":916395229},"http":{"id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/2","scheme":"https","time":{"nanos":916395229,"seconds":1781015426},"url_path":"/maas-api/v1/subscriptions","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.3:61916","port":61916}}}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f546c26-aa10-9106-8b2d-9a3dfeb6c810","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56662","PortSpecifier":{"PortValue":56662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:56662","PortSpecifier":{"PortValue":56662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015427,"nanos":403130855},"http":{"id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781015727,"groups":["Engineering","Project-Alpha"],"iat":1781015427,"iss":"https://keycloak.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dd0c8dc2-6924-57fe-e63e-9e659a06ef33","preferred_username":"alice_lead","scope":"openid email profile","sid":"t5Mk2XO2eh37xpuEQ1zm9dRF","sub":"6a2ac640-9df8-4a0f-9bb1-940c03a02d82","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1781015727,"groups":["Engineering","Project-Alpha"],"iat":1781015427,"iss":"https://keycloak.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:dd0c8dc2-6924-57fe-e63e-9e659a06ef33","preferred_username":"alice_lead","scope":"openid email profile","sid":"t5Mk2XO2eh37xpuEQ1zm9dRF","sub":"6a2ac640-9df8-4a0f-9bb1-940c03a02d82","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","authorization":"Bearer **** ****REDACTED_JWT****","content-type":"application/json","user-agent":"curl/7.76.1","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQAoETkFNRRI4GjZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC02ODdmZjY5OTYtN3Ria3MKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnQKBU9XTkVSEmsaaWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9tYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAo5Cg1XT1JLTE9BRF9OQU1FEigaJm1hYXMtZGVmYXVsdC1nYXRld2F5LW9wZW5zaGlmdC1kZWZhdWx0","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/2","scheme":"https","time":{"nanos":403130855,"seconds":1781015427},"url_path":"/maas-api/v1/api-keys","user_agent":"curl/7.76.1"},"source":{"address":"100.64.0.4:56662","port":56662}}}
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9232f1b5-e2d3-4993-ad80-ce62019b7dde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29752","PortSpecifier":{"PortValue":29752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29752","PortSpecifier":{"PortValue":29752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":618833699},"http":{"id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8c1cbd2-e573-4073-a2f9-ee39263eb36a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84512b43-b941-42be-9146-7d5c6901c273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46984","PortSpecifier":{"PortValue":46984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84512b43-b941-42be-9146-7d5c6901c273","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84512b43-b941-42be-9146-7d5c6901c273","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46984","PortSpecifier":{"PortValue":46984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":670394799},"http":{"id":"84512b43-b941-42be-9146-7d5c6901c273","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"84512b43-b941-42be-9146-7d5c6901c273","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84512b43-b941-42be-9146-7d5c6901c273","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84512b43-b941-42be-9146-7d5c6901c273","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84512b43-b941-42be-9146-7d5c6901c273","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84512b43-b941-42be-9146-7d5c6901c273","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84512b43-b941-42be-9146-7d5c6901c273","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84512b43-b941-42be-9146-7d5c6901c273","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84512b43-b941-42be-9146-7d5c6901c273","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64910","PortSpecifier":{"PortValue":64910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","method":"GET","path":"/maas-api/v1/api-keys/b610c4f3-3f5a-47d9-8873-7b0e05d3c27f","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64910","PortSpecifier":{"PortValue":64910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":706834344},"http":{"id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b610c4f3-3f5a-47d9-8873-7b0e05d3c27f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b610c4f3-3f5a-47d9-8873-7b0e05d3c27f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52f1a415-c23a-4a23-919e-d0aaae2d1ab0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49308","PortSpecifier":{"PortValue":49308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49308","PortSpecifier":{"PortValue":49308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":742656007},"http":{"id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4309324c-bbc2-4ef6-bbaf-ab46f9f2fa7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d7ef31-5265-444f-8031-514de77b95d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46990","PortSpecifier":{"PortValue":46990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23d7ef31-5265-444f-8031-514de77b95d6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23d7ef31-5265-444f-8031-514de77b95d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46990","PortSpecifier":{"PortValue":46990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":778889795},"http":{"id":"23d7ef31-5265-444f-8031-514de77b95d6","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"23d7ef31-5265-444f-8031-514de77b95d6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23d7ef31-5265-444f-8031-514de77b95d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23d7ef31-5265-444f-8031-514de77b95d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23d7ef31-5265-444f-8031-514de77b95d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d7ef31-5265-444f-8031-514de77b95d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23d7ef31-5265-444f-8031-514de77b95d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d7ef31-5265-444f-8031-514de77b95d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23d7ef31-5265-444f-8031-514de77b95d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46180","PortSpecifier":{"PortValue":46180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2102c6da-ccbc-4921-b697-c4486ea746cc","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46180","PortSpecifier":{"PortValue":46180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":816174995},"http":{"id":"2102c6da-ccbc-4921-b697-c4486ea746cc","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2102c6da-ccbc-4921-b697-c4486ea746cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50150","PortSpecifier":{"PortValue":50150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6728511d-35b5-462f-b04d-5a073861c4b0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50150","PortSpecifier":{"PortValue":50150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":865852843},"http":{"id":"6728511d-35b5-462f-b04d-5a073861c4b0","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6728511d-35b5-462f-b04d-5a073861c4b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64912","PortSpecifier":{"PortValue":64912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64912","PortSpecifier":{"PortValue":64912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":905146434},"http":{"id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fcb5529-b3da-4e22-aad2-acf0b66aedb1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49316","PortSpecifier":{"PortValue":49316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","method":"DELETE","path":"/maas-api/v1/api-keys/0df44d67-8169-4302-8459-95edaec335c6","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49316","PortSpecifier":{"PortValue":49316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":938829806},"http":{"id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0df44d67-8169-4302-8459-95edaec335c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/0df44d67-8169-4302-8459-95edaec335c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e188d9b-dd89-45d3-8df0-63d8ac942cae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77197a50-3651-468d-b4fe-198928d4be4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29764","PortSpecifier":{"PortValue":29764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77197a50-3651-468d-b4fe-198928d4be4d","method":"GET","path":"/maas-api/v1/api-keys/0df44d67-8169-4302-8459-95edaec335c6","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77197a50-3651-468d-b4fe-198928d4be4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29764","PortSpecifier":{"PortValue":29764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015450,"nanos":976130611},"http":{"id":"77197a50-3651-468d-b4fe-198928d4be4d","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0df44d67-8169-4302-8459-95edaec335c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"77197a50-3651-468d-b4fe-198928d4be4d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77197a50-3651-468d-b4fe-198928d4be4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77197a50-3651-468d-b4fe-198928d4be4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77197a50-3651-468d-b4fe-198928d4be4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0df44d67-8169-4302-8459-95edaec335c6",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77197a50-3651-468d-b4fe-198928d4be4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77197a50-3651-468d-b4fe-198928d4be4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77197a50-3651-468d-b4fe-198928d4be4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77197a50-3651-468d-b4fe-198928d4be4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46996","PortSpecifier":{"PortValue":46996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:46996","PortSpecifier":{"PortValue":46996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":11874758},"http":{"id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4d8e0aa-bf25-4111-9945-aa882d3625a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46196","PortSpecifier":{"PortValue":46196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d70c8a28-aea5-4698-8499-d51c00f1c610","method":"GET","path":"/maas-api/v1/api-keys/125d6bf7-d107-440a-bc44-18c515705001","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46196","PortSpecifier":{"PortValue":46196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":44190358},"http":{"id":"d70c8a28-aea5-4698-8499-d51c00f1c610","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/125d6bf7-d107-440a-bc44-18c515705001",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/125d6bf7-d107-440a-bc44-18c515705001",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d70c8a28-aea5-4698-8499-d51c00f1c610","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d227e67-82af-4460-b385-5393a7e73355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64916","PortSpecifier":{"PortValue":64916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d227e67-82af-4460-b385-5393a7e73355","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d227e67-82af-4460-b385-5393a7e73355","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64916","PortSpecifier":{"PortValue":64916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":78316622},"http":{"id":"3d227e67-82af-4460-b385-5393a7e73355","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3d227e67-82af-4460-b385-5393a7e73355","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d227e67-82af-4460-b385-5393a7e73355","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d227e67-82af-4460-b385-5393a7e73355","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d227e67-82af-4460-b385-5393a7e73355","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d227e67-82af-4460-b385-5393a7e73355","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d227e67-82af-4460-b385-5393a7e73355","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d227e67-82af-4460-b385-5393a7e73355","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d227e67-82af-4460-b385-5393a7e73355","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49330","PortSpecifier":{"PortValue":49330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","method":"DELETE","path":"/maas-api/v1/api-keys/125d6bf7-d107-440a-bc44-18c515705001","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49330","PortSpecifier":{"PortValue":49330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":111322438},"http":{"id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/125d6bf7-d107-440a-bc44-18c515705001",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/125d6bf7-d107-440a-bc44-18c515705001",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"636eb1d9-1151-415e-a09f-5ecd7f650b19","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47010","PortSpecifier":{"PortValue":47010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1851d30a-52aa-4532-9dae-cbc18c064b97","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47010","PortSpecifier":{"PortValue":47010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":148238712},"http":{"id":"1851d30a-52aa-4532-9dae-cbc18c064b97","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1851d30a-52aa-4532-9dae-cbc18c064b97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64930","PortSpecifier":{"PortValue":64930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","method":"GET","path":"/maas-api/v1/api-keys/a9765380-f70b-4a13-82cf-cafb975e5152","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64930","PortSpecifier":{"PortValue":64930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":182271172},"http":{"id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a9765380-f70b-4a13-82cf-cafb975e5152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a9765380-f70b-4a13-82cf-cafb975e5152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91cbe13a-e6cd-46ce-a1b9-c8fe6e0d1ead","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49340","PortSpecifier":{"PortValue":49340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a7848c5-7344-45a6-863f-7a385c1980c2","method":"DELETE","path":"/maas-api/v1/api-keys/a9765380-f70b-4a13-82cf-cafb975e5152","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49340","PortSpecifier":{"PortValue":49340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":213089734},"http":{"id":"2a7848c5-7344-45a6-863f-7a385c1980c2","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a9765380-f70b-4a13-82cf-cafb975e5152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a9765380-f70b-4a13-82cf-cafb975e5152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a7848c5-7344-45a6-863f-7a385c1980c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47022","PortSpecifier":{"PortValue":47022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47022","PortSpecifier":{"PortValue":47022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":246008056},"http":{"id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb18fcd4-1ccb-4666-a84c-994367a50c4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a693452d-98ef-4f4e-90da-6986508449f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50160","PortSpecifier":{"PortValue":50160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a693452d-98ef-4f4e-90da-6986508449f9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a693452d-98ef-4f4e-90da-6986508449f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50160","PortSpecifier":{"PortValue":50160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":280260777},"http":{"id":"a693452d-98ef-4f4e-90da-6986508449f9","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a693452d-98ef-4f4e-90da-6986508449f9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a693452d-98ef-4f4e-90da-6986508449f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a693452d-98ef-4f4e-90da-6986508449f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a693452d-98ef-4f4e-90da-6986508449f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a693452d-98ef-4f4e-90da-6986508449f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a693452d-98ef-4f4e-90da-6986508449f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a693452d-98ef-4f4e-90da-6986508449f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a693452d-98ef-4f4e-90da-6986508449f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64942","PortSpecifier":{"PortValue":64942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64942","PortSpecifier":{"PortValue":64942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":311213568},"http":{"id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3e2b9568-58b7-49c0-ac34-7d622555bafa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29770","PortSpecifier":{"PortValue":29770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","method":"GET","path":"/maas-api/v1/api-keys/d2dc4a40-e018-4002-805c-af4d34085fc5","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29770","PortSpecifier":{"PortValue":29770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":343377465},"http":{"id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2dc4a40-e018-4002-805c-af4d34085fc5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2dc4a40-e018-4002-805c-af4d34085fc5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a88f6e9d-831c-4987-b944-75d24a8baf4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49342","PortSpecifier":{"PortValue":49342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49342","PortSpecifier":{"PortValue":49342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":380870669},"http":{"id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54f7718d-3dfc-4a1e-b72e-e6b0640b335b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46200","PortSpecifier":{"PortValue":46200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","method":"GET","path":"/maas-api/v1/api-keys/d2dc4a40-e018-4002-805c-af4d34085fc5","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46200","PortSpecifier":{"PortValue":46200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":409922451},"http":{"id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2dc4a40-e018-4002-805c-af4d34085fc5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d2dc4a40-e018-4002-805c-af4d34085fc5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a1e7ecf-a9a8-4eee-a072-7348deb9b70a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47026","PortSpecifier":{"PortValue":47026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","method":"GET","path":"/maas-api/v1/api-keys/94e7a3b8-edb4-4550-95be-bfd53e03cda5","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47026","PortSpecifier":{"PortValue":47026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":439802641},"http":{"id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94e7a3b8-edb4-4550-95be-bfd53e03cda5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/94e7a3b8-edb4-4550-95be-bfd53e03cda5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e14e9fd-a6bb-4ebe-84be-52592ab5256e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50164","PortSpecifier":{"PortValue":50164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","method":"GET","path":"/maas-api/v1/api-keys/3d791b16-ee5c-437b-af69-f1b4cc31929b","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50164","PortSpecifier":{"PortValue":50164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":481567397},"http":{"id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d791b16-ee5c-437b-af69-f1b4cc31929b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3d791b16-ee5c-437b-af69-f1b4cc31929b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0e0f8f3-7fac-4a66-b619-2efa077cd49d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29778","PortSpecifier":{"PortValue":29778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dd3263d-3c09-400e-84d6-90a601a4b718","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29778","PortSpecifier":{"PortValue":29778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":517685384},"http":{"id":"8dd3263d-3c09-400e-84d6-90a601a4b718","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dd3263d-3c09-400e-84d6-90a601a4b718","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64956","PortSpecifier":{"PortValue":64956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c689486f-8fd9-43af-99ed-ffa516251e09","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64956","PortSpecifier":{"PortValue":64956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":549572222},"http":{"id":"c689486f-8fd9-43af-99ed-ffa516251e09","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c689486f-8fd9-43af-99ed-ffa516251e09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e232efbc-a34b-4693-b231-0afe455f473c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49350","PortSpecifier":{"PortValue":49350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e232efbc-a34b-4693-b231-0afe455f473c","method":"GET","path":"/maas-api/v1/api-keys/91920531-b245-4ec4-bcac-46504da211fd","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e232efbc-a34b-4693-b231-0afe455f473c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49350","PortSpecifier":{"PortValue":49350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":582876006},"http":{"id":"e232efbc-a34b-4693-b231-0afe455f473c","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91920531-b245-4ec4-bcac-46504da211fd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e232efbc-a34b-4693-b231-0afe455f473c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e232efbc-a34b-4693-b231-0afe455f473c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e232efbc-a34b-4693-b231-0afe455f473c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e232efbc-a34b-4693-b231-0afe455f473c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/91920531-b245-4ec4-bcac-46504da211fd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e232efbc-a34b-4693-b231-0afe455f473c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e232efbc-a34b-4693-b231-0afe455f473c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e232efbc-a34b-4693-b231-0afe455f473c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e232efbc-a34b-4693-b231-0afe455f473c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46216","PortSpecifier":{"PortValue":46216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","method":"POST","path":"/maas-api/v1/api-keys/bulk-revoke","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46216","PortSpecifier":{"PortValue":46216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":617833842},"http":{"id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:maas-admin:tester-admin-user","uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=539539db-46e7-410e-9fdf-f4b0195a7703"]},"groups":["system:serviceaccounts","system:serviceaccounts:maas-admin","system:authenticated"],"uid":"8f1fa46f-39c9-4c2d-9039-4931cf3e82ba","username":"system:serviceaccount:maas-admin:tester-admin-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/bulk-revoke",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:maas-admin:tester-admin-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:maas-admin\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac2653d-00cf-49c1-afd1-3d5f02dfd436","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47030","PortSpecifier":{"PortValue":47030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47030","PortSpecifier":{"PortValue":47030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":653830342},"http":{"id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fed80fa-b663-433b-82d9-9fb6cfd034f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50178","PortSpecifier":{"PortValue":50178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e579e110-97e2-4fca-9e44-1c41089c5eed","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50178","PortSpecifier":{"PortValue":50178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":688180444},"http":{"id":"e579e110-97e2-4fca-9e44-1c41089c5eed","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e579e110-97e2-4fca-9e44-1c41089c5eed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64960","PortSpecifier":{"PortValue":64960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64960","PortSpecifier":{"PortValue":64960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":730776401},"http":{"id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baca2c07-f6ac-4a32-9f41-6d0b83a371d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49360","PortSpecifier":{"PortValue":49360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49360","PortSpecifier":{"PortValue":49360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":771605204},"http":{"id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b5e91b9-2a46-4a1f-a207-accc20e46363","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29786","PortSpecifier":{"PortValue":29786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29786","PortSpecifier":{"PortValue":29786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":804365021},"http":{"id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"971128f8-4356-4c1d-b400-c12c7b8bdb01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47032","PortSpecifier":{"PortValue":47032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47032","PortSpecifier":{"PortValue":47032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":835499802},"http":{"id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8652b5f4-0787-413e-b3d4-ea27c0a3766b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46232","PortSpecifier":{"PortValue":46232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ad26673-09f8-40ac-81f8-298c01269a52","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46232","PortSpecifier":{"PortValue":46232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":871350483},"http":{"id":"6ad26673-09f8-40ac-81f8-298c01269a52","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ad26673-09f8-40ac-81f8-298c01269a52","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:51384","PortSpecifier":{"PortValue":51384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c054aec9-00e3-438b-95c2-7492a072ed06","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.43:51384","PortSpecifier":{"PortValue":51384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":881204987},"http":{"id":"c054aec9-00e3-438b-95c2-7492a072ed06","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}},"metadata":{"subscription-info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.43","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.134.0.43","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"c054aec9-00e3-438b-95c2-7492a072ed06"},"host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","id":"c054aec9-00e3-438b-95c2-7492a072ed06","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":881204987,"seconds":1781015451},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.134.0.43:51384","port":51384}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c054aec9-00e3-438b-95c2-7492a072ed06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":916426598},"http":{"id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izsEIfAVOZ7z24HB_rHoANrFZte3YAgajkDILJY2uuxkShdE0C35Xkrnygz7"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izsEIfAVOZ7z24HB_rHoANrFZte3YAgajkDILJY2uuxkShdE0C35Xkrnygz7\"}"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bc370d36-c3eb-4c53-ada0-55ba89a6a42b","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d58e9e5c-097e-4e33-8c78-06a0a40a32c8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29790","PortSpecifier":{"PortValue":29790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"419c1558-40bd-4627-aa5d-fadec3262d61","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29790","PortSpecifier":{"PortValue":29790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":949959539},"http":{"id":"419c1558-40bd-4627-aa5d-fadec3262d61","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-invalid-key-12345"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-invalid-key-12345\"}"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** key format","valid":false}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","input":{"auth":{"identity":"Bearer **** key format","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"419c1558-40bd-4627-aa5d-fadec3262d61","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46242","PortSpecifier":{"PortValue":46242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015451,"nanos":985876464},"http":{"id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.25~maas-default-gateway-openshift-default-687ff6996-7tbks.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T14:30:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7604bc1d-0dff-43bb-a32e-55d19b1c1072","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64962","PortSpecifier":{"PortValue":64962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54d97545-5f8a-4e5a-b65a-634caa792282","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:64962","PortSpecifier":{"PortValue":64962}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015452,"nanos":8630853},"http":{"id":"54d97545-5f8a-4e5a-b65a-634caa792282","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54d97545-5f8a-4e5a-b65a-634caa792282","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49374","PortSpecifier":{"PortValue":49374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce8e7089-8940-40e4-8daf-6d06f394908c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:49374","PortSpecifier":{"PortValue":49374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015452,"nanos":41035482},"http":{"id":"ce8e7089-8940-40e4-8daf-6d06f394908c","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q8zoRPE6Oqa7FLHL_ORX6Khf5LNxf3raW5VLFTePbbXpUCGRpe50Je8D6nlw"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q8zoRPE6Oqa7FLHL_ORX6Khf5LNxf3raW5VLFTePbbXpUCGRpe50Je8D6nlw\"}"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e1483943-eea6-4dd7-b410-0cb05b8ffb8e","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce8e7089-8940-40e4-8daf-6d06f394908c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50192","PortSpecifier":{"PortValue":50192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b26f085-2bc2-445d-8944-3c5dec478112","method":"DELETE","path":"/maas-api/v1/api-keys/e1483943-eea6-4dd7-b410-0cb05b8ffb8e","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50192","PortSpecifier":{"PortValue":50192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015452,"nanos":74940896},"http":{"id":"5b26f085-2bc2-445d-8944-3c5dec478112","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e1483943-eea6-4dd7-b410-0cb05b8ffb8e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e1483943-eea6-4dd7-b410-0cb05b8ffb8e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b26f085-2bc2-445d-8944-3c5dec478112","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29794","PortSpecifier":{"PortValue":29794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3760813-6c37-46ff-a929-541721f8ebfc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29794","PortSpecifier":{"PortValue":29794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":109414915},"http":{"id":"a3760813-6c37-46ff-a929-541721f8ebfc","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-q8zoRPE6Oqa7FLHL_ORX6Khf5LNxf3raW5VLFTePbbXpUCGRpe50Je8D6nlw"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-q8zoRPE6Oqa7FLHL_ORX6Khf5LNxf3raW5VLFTePbbXpUCGRpe50Je8D6nlw\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3760813-6c37-46ff-a929-541721f8ebfc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46258","PortSpecifier":{"PortValue":46258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46258","PortSpecifier":{"PortValue":46258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":142328648},"http":{"id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-izsEIfAVOZ7z24HB_rHoANrFZte3YAgajkDILJY2uuxkShdE0C35Xkrnygz7"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-izsEIfAVOZ7z24HB_rHoANrFZte3YAgajkDILJY2uuxkShdE0C35Xkrnygz7\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bc370d36-c3eb-4c53-ada0-55ba89a6a42b","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"baa5f3ad-e43d-47a2-bfc0-25ce8a442ace","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47046","PortSpecifier":{"PortValue":47046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99f85df6-e116-4a94-9081-1dc92f0882e7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:47046","PortSpecifier":{"PortValue":47046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":179843260},"http":{"id":"99f85df6-e116-4a94-9081-1dc92f0882e7","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99f85df6-e116-4a94-9081-1dc92f0882e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50204","PortSpecifier":{"PortValue":50204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94b946ad-35b3-43e2-8d47-60054a4eb709","method":"DELETE","path":"/maas-api/v1/api-keys/1afe5460-90ef-4d9c-b73b-8722128b2297","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50204","PortSpecifier":{"PortValue":50204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":212717855},"http":{"id":"94b946ad-35b3-43e2-8d47-60054a4eb709","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1afe5460-90ef-4d9c-b73b-8722128b2297",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1afe5460-90ef-4d9c-b73b-8722128b2297",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94b946ad-35b3-43e2-8d47-60054a4eb709","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"665057df-6b11-458d-9010-9339b4384635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29796","PortSpecifier":{"PortValue":29796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"665057df-6b11-458d-9010-9339b4384635","method":"DELETE","path":"/maas-api/v1/api-keys/1afe5460-90ef-4d9c-b73b-8722128b2297","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"665057df-6b11-458d-9010-9339b4384635","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29796","PortSpecifier":{"PortValue":29796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":244025644},"http":{"id":"665057df-6b11-458d-9010-9339b4384635","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1afe5460-90ef-4d9c-b73b-8722128b2297",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"665057df-6b11-458d-9010-9339b4384635","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"665057df-6b11-458d-9010-9339b4384635","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"665057df-6b11-458d-9010-9339b4384635","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"665057df-6b11-458d-9010-9339b4384635","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/1afe5460-90ef-4d9c-b73b-8722128b2297",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"665057df-6b11-458d-9010-9339b4384635","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"665057df-6b11-458d-9010-9339b4384635","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"665057df-6b11-458d-9010-9339b4384635","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"665057df-6b11-458d-9010-9339b4384635","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46268","PortSpecifier":{"PortValue":46268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","method":"DELETE","path":"/maas-api/v1/api-keys/nonexistent-uuid-12345","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46268","PortSpecifier":{"PortValue":46268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":284165158},"http":{"id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/nonexistent-uuid-12345",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96afa68b-aa7f-4d75-91d5-6b8d51129139","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9588","PortSpecifier":{"PortValue":9588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9588","PortSpecifier":{"PortValue":9588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":316306917},"http":{"id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5a9bec0-f05d-4c22-b15a-30d4a6a4f61b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50208","PortSpecifier":{"PortValue":50208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","method":"DELETE","path":"/maas-api/v1/api-keys/538f239c-91dd-4067-b2b5-103be9964bf5","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50208","PortSpecifier":{"PortValue":50208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":346646224},"http":{"id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/538f239c-91dd-4067-b2b5-103be9964bf5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/538f239c-91dd-4067-b2b5-103be9964bf5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b1fe0bd-73f4-4b83-a93f-af1ec0c69dd6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29804","PortSpecifier":{"PortValue":29804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29804","PortSpecifier":{"PortValue":29804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":379496405},"http":{"id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5bd0969-2323-41c2-af0c-3d9b55a6a906","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f757f0ae-b842-4739-82e5-053df23617d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46274","PortSpecifier":{"PortValue":46274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f757f0ae-b842-4739-82e5-053df23617d4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f757f0ae-b842-4739-82e5-053df23617d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46274","PortSpecifier":{"PortValue":46274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":410596815},"http":{"id":"f757f0ae-b842-4739-82e5-053df23617d4","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f757f0ae-b842-4739-82e5-053df23617d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-H8iOVAe8gjEqK68X_FQaQl06UIPUdcl4qiPgCm9AiDolr0YMOpjIyCIHOlTo"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f757f0ae-b842-4739-82e5-053df23617d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-H8iOVAe8gjEqK68X_FQaQl06UIPUdcl4qiPgCm9AiDolr0YMOpjIyCIHOlTo\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f757f0ae-b842-4739-82e5-053df23617d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"f757f0ae-b842-4739-82e5-053df23617d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f757f0ae-b842-4739-82e5-053df23617d4","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f757f0ae-b842-4739-82e5-053df23617d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f757f0ae-b842-4739-82e5-053df23617d4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f757f0ae-b842-4739-82e5-053df23617d4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41842","PortSpecifier":{"PortValue":41842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41842","PortSpecifier":{"PortValue":41842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":433137644},"http":{"id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5RWyN46S9loBF5v0_iNYoI5ZLtWtpFJiSl6Ch4QjD8d73IvzybVhqXZAbLii"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5RWyN46S9loBF5v0_iNYoI5ZLtWtpFJiSl6Ch4QjD8d73IvzybVhqXZAbLii\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e63fa409-9b6d-40fe-b360-73237c8beab7","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8487151b-dd73-45b3-95f7-e1b2bdf5e2d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28048","PortSpecifier":{"PortValue":28048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28048","PortSpecifier":{"PortValue":28048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":471585338},"http":{"id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f258e57-9b30-4d76-b6ae-b2d4e0484484","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4335eb42-234b-482b-a802-696c9b20e36c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9594","PortSpecifier":{"PortValue":9594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4335eb42-234b-482b-a802-696c9b20e36c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4335eb42-234b-482b-a802-696c9b20e36c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9594","PortSpecifier":{"PortValue":9594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":511468148},"http":{"id":"4335eb42-234b-482b-a802-696c9b20e36c","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"4335eb42-234b-482b-a802-696c9b20e36c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4335eb42-234b-482b-a802-696c9b20e36c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4335eb42-234b-482b-a802-696c9b20e36c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4335eb42-234b-482b-a802-696c9b20e36c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4335eb42-234b-482b-a802-696c9b20e36c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4335eb42-234b-482b-a802-696c9b20e36c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4335eb42-234b-482b-a802-696c9b20e36c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4335eb42-234b-482b-a802-696c9b20e36c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50212","PortSpecifier":{"PortValue":50212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50212","PortSpecifier":{"PortValue":50212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":543497774},"http":{"id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d7c5ea8-43ad-44c4-9e40-460fb88825f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d583475e-013a-4ab1-8800-e2c050920d55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29820","PortSpecifier":{"PortValue":29820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d583475e-013a-4ab1-8800-e2c050920d55","method":"DELETE","path":"/maas-api/v1/api-keys/f0f48b60-1feb-487d-9526-2721a4b515f3","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d583475e-013a-4ab1-8800-e2c050920d55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29820","PortSpecifier":{"PortValue":29820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":578126405},"http":{"id":"d583475e-013a-4ab1-8800-e2c050920d55","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/f0f48b60-1feb-487d-9526-2721a4b515f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d583475e-013a-4ab1-8800-e2c050920d55","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d583475e-013a-4ab1-8800-e2c050920d55","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d583475e-013a-4ab1-8800-e2c050920d55","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d583475e-013a-4ab1-8800-e2c050920d55","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/f0f48b60-1feb-487d-9526-2721a4b515f3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d583475e-013a-4ab1-8800-e2c050920d55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d583475e-013a-4ab1-8800-e2c050920d55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d583475e-013a-4ab1-8800-e2c050920d55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d583475e-013a-4ab1-8800-e2c050920d55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41852","PortSpecifier":{"PortValue":41852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","method":"DELETE","path":"/maas-api/v1/api-keys/48a30cb2-5a6a-4e30-940e-bbea57bbd747","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41852","PortSpecifier":{"PortValue":41852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":613290900},"http":{"id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/48a30cb2-5a6a-4e30-940e-bbea57bbd747",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/48a30cb2-5a6a-4e30-940e-bbea57bbd747",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2f8b471-9900-4600-b040-a81fbbf14fdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acf5e500-49c2-4641-a4df-4b974109effe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28056","PortSpecifier":{"PortValue":28056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acf5e500-49c2-4641-a4df-4b974109effe","method":"DELETE","path":"/maas-api/v1/api-keys/74dc7f98-2805-42fe-8243-9b624f58220f","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acf5e500-49c2-4641-a4df-4b974109effe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28056","PortSpecifier":{"PortValue":28056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":646901866},"http":{"id":"acf5e500-49c2-4641-a4df-4b974109effe","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/74dc7f98-2805-42fe-8243-9b624f58220f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"acf5e500-49c2-4641-a4df-4b974109effe","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"acf5e500-49c2-4641-a4df-4b974109effe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acf5e500-49c2-4641-a4df-4b974109effe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acf5e500-49c2-4641-a4df-4b974109effe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/74dc7f98-2805-42fe-8243-9b624f58220f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acf5e500-49c2-4641-a4df-4b974109effe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acf5e500-49c2-4641-a4df-4b974109effe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acf5e500-49c2-4641-a4df-4b974109effe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acf5e500-49c2-4641-a4df-4b974109effe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46278","PortSpecifier":{"PortValue":46278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46278","PortSpecifier":{"PortValue":46278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":685202003},"http":{"id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0f9adf4-d58d-49cd-bd1f-c53f7b59528e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9600","PortSpecifier":{"PortValue":9600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9600","PortSpecifier":{"PortValue":9600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":716093689},"http":{"id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53d26a50-aa59-4487-8d70-bc39c3abfba9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50220","PortSpecifier":{"PortValue":50220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e0161c26-d524-4472-84d6-c726e7ae9a76","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50220","PortSpecifier":{"PortValue":50220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":747092181},"http":{"id":"e0161c26-d524-4472-84d6-c726e7ae9a76","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e0161c26-d524-4472-84d6-c726e7ae9a76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29828","PortSpecifier":{"PortValue":29828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29828","PortSpecifier":{"PortValue":29828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":783353547},"http":{"id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ArcusXkrLDUfee5d_EMgcblMdKA9VkOnhYCSCSFOCHqBvsARkcoOdNVWAY7p"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ArcusXkrLDUfee5d_EMgcblMdKA9VkOnhYCSCSFOCHqBvsARkcoOdNVWAY7p\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6b36bc32-6217-44da-961d-9fe550f314e4","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4912796e-ed6b-40a2-a04c-d49bdae284d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46288","PortSpecifier":{"PortValue":46288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","method":"DELETE","path":"/maas-api/v1/api-keys/6b36bc32-6217-44da-961d-9fe550f314e4","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46288","PortSpecifier":{"PortValue":46288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":811763449},"http":{"id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6b36bc32-6217-44da-961d-9fe550f314e4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/6b36bc32-6217-44da-961d-9fe550f314e4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f27a6d8-2324-47f0-9dcb-2c741fdfb8e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50236","PortSpecifier":{"PortValue":50236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","method":"DELETE","path":"/maas-api/v1/api-keys/e42f7ddf-75d4-4d44-bcc7-29e783dc6027","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:50236","PortSpecifier":{"PortValue":50236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":844650998},"http":{"id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e42f7ddf-75d4-4d44-bcc7-29e783dc6027",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e42f7ddf-75d4-4d44-bcc7-29e783dc6027",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f3dd366-3b54-4e3b-9dbb-3b78b6affcdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41868","PortSpecifier":{"PortValue":41868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","method":"DELETE","path":"/maas-api/v1/api-keys/3c7bca3b-b212-4a6c-b234-eb4bc909db48","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41868","PortSpecifier":{"PortValue":41868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":882079342},"http":{"id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3c7bca3b-b212-4a6c-b234-eb4bc909db48",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/3c7bca3b-b212-4a6c-b234-eb4bc909db48",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3701ca5-fdb6-453f-912b-8ff2d40e78b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28066","PortSpecifier":{"PortValue":28066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28066","PortSpecifier":{"PortValue":28066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":915289363},"http":{"id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ArcusXkrLDUfee5d_EMgcblMdKA9VkOnhYCSCSFOCHqBvsARkcoOdNVWAY7p"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ArcusXkrLDUfee5d_EMgcblMdKA9VkOnhYCSCSFOCHqBvsARkcoOdNVWAY7p\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d3615ba-4cd0-4dd5-9e65-81068e18d75f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29842","PortSpecifier":{"PortValue":29842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:29842","PortSpecifier":{"PortValue":29842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":937087606},"http":{"id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1N4uKgpkR0sOioZ84_SJakSTVfQiEf0u7MXknThwO79sxtUWl8CxNA8pNbUpE"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1N4uKgpkR0sOioZ84_SJakSTVfQiEf0u7MXknThwO79sxtUWl8CxNA8pNbUpE\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8a701b0-4b8c-4ba5-badb-2642b3a76a58","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9610","PortSpecifier":{"PortValue":9610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9610","PortSpecifier":{"PortValue":9610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015454,"nanos":969626361},"http":{"id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jusJxfqmQ6dsHEZ7_rHi3jqx8X6M9TUr122SSy1I2hMQXMVcmhS4vpzYBRIE"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jusJxfqmQ6dsHEZ7_rHi3jqx8X6M9TUr122SSy1I2hMQXMVcmhS4vpzYBRIE\"}"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T14:30:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a08f7b2-dd33-4f52-b1dc-23aa7df55667","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a54312-125f-454f-a5e0-95605845de14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:44612","PortSpecifier":{"PortValue":44612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56a54312-125f-454f-a5e0-95605845de14","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56a54312-125f-454f-a5e0-95605845de14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:44612","PortSpecifier":{"PortValue":44612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015455,"nanos":244841276},"http":{"id":"56a54312-125f-454f-a5e0-95605845de14","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"56a54312-125f-454f-a5e0-95605845de14","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56a54312-125f-454f-a5e0-95605845de14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56a54312-125f-454f-a5e0-95605845de14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56a54312-125f-454f-a5e0-95605845de14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a54312-125f-454f-a5e0-95605845de14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56a54312-125f-454f-a5e0-95605845de14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a54312-125f-454f-a5e0-95605845de14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56a54312-125f-454f-a5e0-95605845de14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41876","PortSpecifier":{"PortValue":41876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:41876","PortSpecifier":{"PortValue":41876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015455,"nanos":281949173},"http":{"id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f11e69-cfea-4e5d-848b-29f5309b1a43","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15364","PortSpecifier":{"PortValue":15364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15364","PortSpecifier":{"PortValue":15364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015455,"nanos":318263639},"http":{"id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a30aa8d5-5d22-48f6-ab49-9571b91801b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2512","PortSpecifier":{"PortValue":2512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2512","PortSpecifier":{"PortValue":2512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015455,"nanos":356169500},"http":{"id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6a7b6e0-9457-4806-867f-b6aa16f13040","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28078","PortSpecifier":{"PortValue":28078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","method":"GET","path":"/maas-api/v1/api-keys/332bc0ea-0da8-4143-891a-0825daca1d74","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:28078","PortSpecifier":{"PortValue":28078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015455,"nanos":795831573},"http":{"id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","method":"GET","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/332bc0ea-0da8-4143-891a-0825daca1d74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/332bc0ea-0da8-4143-891a-0825daca1d74",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0da2e1b0-b3b8-460b-acc5-11bc13ae1c31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9626","PortSpecifier":{"PortValue":9626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97373c54-7448-4cda-8dd1-0aec779ce80f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:9626","PortSpecifier":{"PortValue":9626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015458,"nanos":708371367},"http":{"id":"97373c54-7448-4cda-8dd1-0aec779ce80f","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-active-sa","uid":"f753a95c-8b2f-4a2d-9e4a-525f41df8abd","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f3572aec-8e4a-4d50-8cdd-1ac9bb7f9667"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f3572aec-8e4a-4d50-8cdd-1ac9bb7f9667"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"f753a95c-8b2f-4a2d-9e4a-525f41df8abd","username":"system:serviceaccount:llm:e2e-apikey-active-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-active-sa"}
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97373c54-7448-4cda-8dd1-0aec779ce80f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"error","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:30:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:30:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:33864","PortSpecifier":{"PortValue":33864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f612b014-9ce8-45a1-a140-f9b3509190e5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:33864","PortSpecifier":{"PortValue":33864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015477,"nanos":977986830},"http":{"id":"f612b014-9ce8-45a1-a140-f9b3509190e5","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-degraded-sa","uid":"2336c17c-014b-4293-8f1d-f8554299011b","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=de6ddb3b-7d78-4cc6-a786-e553e00d867b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=de6ddb3b-7d78-4cc6-a786-e553e00d867b"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"2336c17c-014b-4293-8f1d-f8554299011b","username":"system:serviceaccount:llm:e2e-apikey-degraded-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-degraded-sa"}
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:31:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f612b014-9ce8-45a1-a140-f9b3509190e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"error","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"error","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"error","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2014","PortSpecifier":{"PortValue":2014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcc871c6-af79-44dc-a449-f3db58f32682","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:2014","PortSpecifier":{"PortValue":2014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015497,"nanos":410951431},"http":{"id":"fcc871c6-af79-44dc-a449-f3db58f32682","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-failed-sa","uid":"17af34f2-23ef-441e-9fea-bcfb97fd88ab","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e2961a7a-48bd-4199-a6e1-65a1dae8faf7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e2961a7a-48bd-4199-a6e1-65a1dae8faf7"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"17af34f2-23ef-441e-9fea-bcfb97fd88ab","username":"system:serviceaccount:llm:e2e-apikey-failed-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-failed-sa"}
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:31:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc871c6-af79-44dc-a449-f3db58f32682","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a92475-c402-997d-8c20-ab973d98d283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:38052","PortSpecifier":{"PortValue":38052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6a92475-c402-997d-8c20-ab973d98d283","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a92475-c402-997d-8c20-ab973d98d283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:38052","PortSpecifier":{"PortValue":38052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015516,"nanos":832572291},"http":{"id":"f6a92475-c402-997d-8c20-ab973d98d283","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f6a92475-c402-997d-8c20-ab973d98d283","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6a92475-c402-997d-8c20-ab973d98d283","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6a92475-c402-997d-8c20-ab973d98d283","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-pending-sa","uid":"d493be46-4358-4941-815b-46d94b9cc66d","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=376b954e-7174-453c-8a00-6a3d9b3019fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6a92475-c402-997d-8c20-ab973d98d283","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=376b954e-7174-453c-8a00-6a3d9b3019fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"d493be46-4358-4941-815b-46d94b9cc66d","username":"system:serviceaccount:llm:e2e-apikey-pending-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a92475-c402-997d-8c20-ab973d98d283","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-pending-sa"}
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a92475-c402-997d-8c20-ab973d98d283","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a92475-c402-997d-8c20-ab973d98d283","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:31:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a92475-c402-997d-8c20-ab973d98d283","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:31:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:31:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:33088","PortSpecifier":{"PortValue":33088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:33088","PortSpecifier":{"PortValue":33088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015527,"nanos":26336697},"http":{"id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa","uid":"8dbf567a-3595-43d8-8f7c-bf0ced52a772","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7e844bd-6dd5-4f71-8b47-f99f01f2112e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d7e844bd-6dd5-4f71-8b47-f99f01f2112e"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"8dbf567a-3595-43d8-8f7c-bf0ced52a772","username":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-apikey-unreconciled-sa"}
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fe9091b-5c01-483c-9ec8-5fb79ecc10b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49304","PortSpecifier":{"PortValue":49304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49304","PortSpecifier":{"PortValue":49304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015553,"nanos":400367650},"http":{"id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:llm:e2e-filter-sa-39ae2577","uid":"c59364b2-e28e-4538-a896-98f7f1ec2bda","groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9c4f28dd-59b2-460a-a3a2-2d9c4fb3c066"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9c4f28dd-59b2-460a-a3a2-2d9c4fb3c066"]},"groups":["system:serviceaccounts","system:serviceaccounts:llm","system:authenticated"],"uid":"c59364b2-e28e-4538-a896-98f7f1ec2bda","username":"system:serviceaccount:llm:e2e-filter-sa-39ae2577"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:llm:e2e-filter-sa-39ae2577"}
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:llm\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e86b003-2825-4eae-b531-1f069a9aaeb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"error","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:32:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:32:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:32:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:32:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:32:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54226","PortSpecifier":{"PortValue":54226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54226","PortSpecifier":{"PortValue":54226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015562,"nanos":528998186},"http":{"id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3ae47d8-1ed0-4334-84c2-536a84caee09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2890","PortSpecifier":{"PortValue":2890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2890","PortSpecifier":{"PortValue":2890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015562,"nanos":584218000},"http":{"id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05a24375-c1da-48ca-b8fa-2e04f5a8464a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:21710","PortSpecifier":{"PortValue":21710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d07750d-189c-45bf-962e-2b5b23af359b","method":"POST","path":"/maas-api/v1/api-keys/search","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:21710","PortSpecifier":{"PortValue":21710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015562,"nanos":620618103},"http":{"id":"6d07750d-189c-45bf-962e-2b5b23af359b","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d07750d-189c-45bf-962e-2b5b23af359b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54240","PortSpecifier":{"PortValue":54240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","method":"DELETE","path":"/maas-api/v1/api-keys/9381180b-8918-4e98-b678-d84f361f5e78","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54240","PortSpecifier":{"PortValue":54240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015562,"nanos":676659375},"http":{"id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/9381180b-8918-4e98-b678-d84f361f5e78",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/9381180b-8918-4e98-b678-d84f361f5e78",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3503d90b-062b-49eb-9e89-390cc2f73e4d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17062","PortSpecifier":{"PortValue":17062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","method":"DELETE","path":"/maas-api/v1/api-keys/91a82e55-4a50-4912-93d4-8f8fe9f225b5","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17062","PortSpecifier":{"PortValue":17062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015562,"nanos":717852426},"http":{"id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/91a82e55-4a50-4912-93d4-8f8fe9f225b5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/91a82e55-4a50-4912-93d4-8f8fe9f225b5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6963270-8f21-49bb-b9f8-fa1fa0bab924","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2906","PortSpecifier":{"PortValue":2906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:2906","PortSpecifier":{"PortValue":2906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015562,"nanos":761311148},"http":{"id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9af6f0c3-fe8e-47cb-9e5c-1280b47c5cef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:35412","PortSpecifier":{"PortValue":35412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:35412","PortSpecifier":{"PortValue":35412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015563,"nanos":77999001},"http":{"id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7qejOMmCatyAs4AG_XEZzcg48nH1pO8KJN3t0MyFIm7T8KJbrWGmhsbaXzXP"}
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7qejOMmCatyAs4AG_XEZzcg48nH1pO8KJN3t0MyFIm7T8KJbrWGmhsbaXzXP\"}"}
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9070e97-508b-4a3c-aed1-fa2e4be1bcd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39096","PortSpecifier":{"PortValue":39096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39096","PortSpecifier":{"PortValue":39096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015579,"nanos":752384095},"http":{"id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7qejOMmCatyAs4AG_XEZzcg48nH1pO8KJN3t0MyFIm7T8KJbrWGmhsbaXzXP"}
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7qejOMmCatyAs4AG_XEZzcg48nH1pO8KJN3t0MyFIm7T8KJbrWGmhsbaXzXP\"}"}
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:32:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c716b9f-4c4a-4524-9fdb-f0941bc9c845","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"debug","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:34:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"error","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77"}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77"}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1"}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1"}
{"level":"info","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9aa1fae6c94b472a9e93d3171067df925aec03229b36d0a281d1679f3d88d77"}
{"level":"info","ts":"2026-06-09T14:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T14:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3cc39a63e4783f867d737566dcff6c23f4b4eaf892fc3e30c7f8d632b768bd1"}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31"}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce"}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T14:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T14:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d53c3d92eb29fb17e304b05038bc93f7b2e34fbce589b960b6737ddb7bb2a31"}
{"level":"info","ts":"2026-06-09T14:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c155afd1e1cd17031c05705c1eb49cae428f9ae93ebd5cd39c7efb43e3b601ce"}
{"level":"info","ts":"2026-06-09T14:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41432","PortSpecifier":{"PortValue":41432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","method":"DELETE","path":"/maas-api/v1/api-keys/71f1b7b4-f8c0-4294-a5e4-03d34770db19","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41432","PortSpecifier":{"PortValue":41432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015709,"nanos":408084528},"http":{"id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","method":"DELETE","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/71f1b7b4-f8c0-4294-a5e4-03d34770db19",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/71f1b7b4-f8c0-4294-a5e4-03d34770db19",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15ed03c0-12e1-4a8c-9244-0c2b9af9372e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:21142","PortSpecifier":{"PortValue":21142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"207ffbbc-175e-4f69-8994-fe963b41a08e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:21142","PortSpecifier":{"PortValue":21142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015709,"nanos":459349125},"http":{"id":"207ffbbc-175e-4f69-8994-fe963b41a08e","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"207ffbbc-175e-4f69-8994-fe963b41a08e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29136","PortSpecifier":{"PortValue":29136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b806ca5d-0504-4f0d-8376-91bd5e229127","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29136","PortSpecifier":{"PortValue":29136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.25:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781015709,"nanos":515000936},"http":{"id":"b806ca5d-0504-4f0d-8376-91bd5e229127","method":"POST","headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"]}}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fb9f1b82a0e4"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e01559fd-8dbe-4898-a62d-49164cf92a77"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ee6de404-1a9f-4c2f-b6b4-9d551db6a9fa","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.25:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.0a7dafb9-8933-4a90-9726-fb9f1b82a0e4.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T14:35:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b806ca5d-0504-4f0d-8376-91bd5e229127","authorized":true,"response":"OK"}