--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:3886","PortSpecifier":{"PortValue":3886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:3886","PortSpecifier":{"PortValue":3886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785533,"nanos":496698797},"http":{"id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-multi-keys-sa","uid":"3c684a03-4b63-41f8-b6a3-7a16068fd6d5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=755bf457-7334-4596-9e55-a81200295df4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=755bf457-7334-4596-9e55-a81200295df4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c684a03-4b63-41f8-b6a3-7a16068fd6d5","username":"system:serviceaccount:default:e2e-multi-keys-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-multi-keys-sa"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-multi-keys-sa"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ddfe43f-b89c-412d-9fb0-86409b1f90ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13022","PortSpecifier":{"PortValue":13022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13022","PortSpecifier":{"PortValue":13022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785533,"nanos":540491661},"http":{"id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-multi-keys-sa","uid":"3c684a03-4b63-41f8-b6a3-7a16068fd6d5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=755bf457-7334-4596-9e55-a81200295df4"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=755bf457-7334-4596-9e55-a81200295df4"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3c684a03-4b63-41f8-b6a3-7a16068fd6d5","username":"system:serviceaccount:default:e2e-multi-keys-sa"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-multi-keys-sa"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-multi-keys-sa"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c97d2839-1eaa-4b16-9df4-37cb4b2f6ab0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:23538","PortSpecifier":{"PortValue":23538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:23538","PortSpecifier":{"PortValue":23538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785541,"nanos":588157959},"http":{"id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tJxEj2Sbg1ss8GRQ_65IOcXMvvBtCJEYeWbrgIFrbVwJXCWXPzpLFdCLXoGb"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tJxEj2Sbg1ss8GRQ_65IOcXMvvBtCJEYeWbrgIFrbVwJXCWXPzpLFdCLXoGb\"}"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-multi-keys-sa"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28fa63f1-5fe3-43b5-944f-294b5446b3ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90e92667-f67f-4282-b6d4-be47d92f2026","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785541,"nanos":595212048},"http":{"id":"90e92667-f67f-4282-b6d4-be47d92f2026","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tJxEj2Sbg1ss8GRQ_65IOcXMvvBtCJEYeWbrgIFrbVwJXCWXPzpLFdCLXoGb"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tJxEj2Sbg1ss8GRQ_65IOcXMvvBtCJEYeWbrgIFrbVwJXCWXPzpLFdCLXoGb\"}"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-simulated\",\"requestedSubscription\":\"e2e-multi-keys-sub1\",\"username\":\"system:serviceaccount:default:e2e-multi-keys-sa\"}"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-multi-keys-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","input":{"auth":{"identity":"Bearer **** sk-oai-tJxEj2Sbg1ss8GRQ_65IOcXMvvBtCJEYeWbrgIFrbVwJXCWXPzpLFdCLXoGb","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-multi-keys-sub1","x-request-id":"90e92667-f67f-4282-b6d4-be47d92f2026"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"90e92667-f67f-4282-b6d4-be47d92f2026","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":595212048,"seconds":1776785541}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":7380},"address":"100.64.0.3:7380"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"},"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-multi-keys-sa\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-multi-keys-sub1"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ab08deeb-9c09-4dd7-8018-3dc10f3bb6b5","selected_subscription":"e2e-multi-keys-sub1","selected_subscription_key":"models-as-a-service/e2e-multi-keys-sub1@llm/e2e-distinct-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-multi-keys-sub1","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:e2e-multi-keys-sa"}} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90e92667-f67f-4282-b6d4-be47d92f2026","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:10452","PortSpecifier":{"PortValue":10452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:10452","PortSpecifier":{"PortValue":10452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785541,"nanos":628802571},"http":{"id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jA0XfLkSQmrRrKG3_vogllbLuoTrt9jPg15VFxz1Iu9Rcd11K8YzxYLu8WaU"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jA0XfLkSQmrRrKG3_vogllbLuoTrt9jPg15VFxz1Iu9Rcd11K8YzxYLu8WaU\"}"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-multi-keys-sa"} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3df4806d-48b9-4e81-8784-daf40d3d8d7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785541,"nanos":634595222},"http":{"id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-jA0XfLkSQmrRrKG3_vogllbLuoTrt9jPg15VFxz1Iu9Rcd11K8YzxYLu8WaU"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-jA0XfLkSQmrRrKG3_vogllbLuoTrt9jPg15VFxz1Iu9Rcd11K8YzxYLu8WaU\"}"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-2-simulated\",\"requestedSubscription\":\"e2e-multi-keys-sub2\",\"username\":\"system:serviceaccount:default:e2e-multi-keys-sa\"}"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-multi-keys-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","input":{"auth":{"identity":"Bearer **** sk-oai-jA0XfLkSQmrRrKG3_vogllbLuoTrt9jPg15VFxz1Iu9Rcd11K8YzxYLu8WaU","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-2-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NDVjNmI0YjQ4LTQ4OXA3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-multi-keys-sub2","x-request-id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":634595222,"seconds":1776785541}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":7380},"address":"100.64.0.3:7380"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"},"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-multi-keys-sa\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-multi-keys-sub2"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c71b0264-e306-4ab9-a93c-cfe5dc75e79c","selected_subscription":"e2e-multi-keys-sub2","selected_subscription_key":"models-as-a-service/e2e-multi-keys-sub2@llm/e2e-distinct-2-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-multi-keys-sub2","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:e2e-multi-keys-sa"}} {"level":"info","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57684a8e-dcaa-40e5-98aa-f8ddf6419bf7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"error","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"error","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"error","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39280","PortSpecifier":{"PortValue":39280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785558,"nanos":324635582},"http":{"id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d087c4a-aa14-45d7-98d8-c6d89c35b3ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2d245d8-a721-446f-b28c-940477bbac0f","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785558,"nanos":344023262},"http":{"id":"d2d245d8-a721-446f-b28c-940477bbac0f","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-simulated\",\"requestedSubscription\":\"e2e-sa-multi-no-hdr-sub1\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"}"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-no-hdr-sub1","x-request-id":"d2d245d8-a721-446f-b28c-940477bbac0f"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"d2d245d8-a721-446f-b28c-940477bbac0f","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":344023262,"seconds":1776785558},"url_path":"/llm/e2e-distinct-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:7380","port":7380}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2d245d8-a721-446f-b28c-940477bbac0f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78556380-e50a-4ecd-ada2-368c9a59515a","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785558,"nanos":357699732},"http":{"id":"78556380-e50a-4ecd-ada2-368c9a59515a","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-2-simulated\",\"requestedSubscription\":\"e2e-sa-multi-no-hdr-sub2\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"}"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-no-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-2-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-no-hdr-sub2","x-request-id":"78556380-e50a-4ecd-ada2-368c9a59515a"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"78556380-e50a-4ecd-ada2-368c9a59515a","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":357699732,"seconds":1776785558},"url_path":"/llm/e2e-distinct-2-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:7380","port":7380}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78556380-e50a-4ecd-ada2-368c9a59515a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57c81927-4650-4e65-b71a-b64f51038dfa","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785558,"nanos":370547367},"http":{"id":"57c81927-4650-4e65-b71a-b64f51038dfa","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header","uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-no-header\"}"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f483e6c9-b1e4-4df2-a15a-1dd1d8110647"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"87b50451-bc1f-4bac-ae55-f6eb1272e4da","username":"system:serviceaccount:default:e2e-sa-multi-subs-no-header"}},"metadata":{"subscription-info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"57c81927-4650-4e65-b71a-b64f51038dfa"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"57c81927-4650-4e65-b71a-b64f51038dfa","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":370547367,"seconds":1776785558},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:7380","port":7380}}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57c81927-4650-4e65-b71a-b64f51038dfa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:46408","PortSpecifier":{"PortValue":46408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"803f2f40-b492-456d-a62e-42c8b26d025d","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:46408","PortSpecifier":{"PortValue":46408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785574,"nanos":987919348},"http":{"id":"803f2f40-b492-456d-a62e-42c8b26d025d","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:32:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"e314c609-ed10-4604-96f8-702a29962ff9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e314c609-ed10-4604-96f8-702a29962ff9","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"803f2f40-b492-456d-a62e-42c8b26d025d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785575,"nanos":7479032},"http":{"id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"e314c609-ed10-4604-96f8-702a29962ff9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-simulated\",\"requestedSubscription\":\"e2e-sa-multi-hdr-sub1\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"}"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e314c609-ed10-4604-96f8-702a29962ff9","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub1","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-hdr-sub1","x-request-id":"7d217604-6ef0-4281-81dc-6b28e0a451e3"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","method":"GET","path":"/llm/e2e-distinct-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":7479032,"seconds":1776785575},"url_path":"/llm/e2e-distinct-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:7380","port":7380}}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d217604-6ef0-4281-81dc-6b28e0a451e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15146","PortSpecifier":{"PortValue":15146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15146","PortSpecifier":{"PortValue":15146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785575,"nanos":42978079},"http":{"id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"e314c609-ed10-4604-96f8-702a29962ff9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e314c609-ed10-4604-96f8-702a29962ff9","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97b9cc05-c70b-4450-9a32-24fbea0ba35c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785575,"nanos":57297325},"http":{"id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"kubernetes-tokens","Priority":1,"Conditions":{"Left":{"Selector":"request.url_path","Operator":5,"Value":".*/v1/models$"},"Right":{"Left":{"Selector":"request.headers.authorization","Operator":2,"Value":""},"Right":{"Left":null,"Right":null}}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header","uid":"e314c609-ed10-4604-96f8-702a29962ff9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-distinct-2-simulated\",\"requestedSubscription\":\"e2e-sa-multi-hdr-sub2\",\"username\":\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"}"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=840f2a8d-5b30-46a2-9436-8afefc81212c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e314c609-ed10-4604-96f8-702a29962ff9","username":"system:serviceaccount:default:e2e-sa-multi-subs-with-header"}},"metadata":{"subscription-info":{"modelRefs":[{"name":"e2e-distinct-2-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-sa-multi-hdr-sub2","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-distinct-2-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** ****REDACTED_JWT****","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-distinct-2-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-sa-multi-hdr-sub2","x-request-id":"cf3e0029-8695-4b02-bdbe-5eb093c51746"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","method":"GET","path":"/llm/e2e-distinct-2-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":57297325,"seconds":1776785575},"url_path":"/llm/e2e-distinct-2-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:7380","port":7380}}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := []\nallowed_users := [\"system:serviceaccount:default:e2e-sa-multi-subs-with-header\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: apiKeyValidation"} {"level":"info","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf3e0029-8695-4b02-bdbe-5eb093c51746","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"info","ts":"2026-04-21T15:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-04-21T15:32:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"414449ae595d12294cda43c4706566f5644d67ef6848de245e6caee2cdb069f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c245170da89e49f061561989e94654ede8e3261330d5fce018b1d279501abd0e"} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346"} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f8e1a2bede8509cb76d997b959699aa0135fff9780ffed78ed7277e9c897b5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df737efd4bb604a17d60dba14fb761aa7e8a2857458db1ec858bc8de2be3f346","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5eba889ca20350be799950d99a94c22b1c4698a87e16558fd90b38fcce3ff76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:32:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830"} {"level":"error","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0740694b94da2b1f6093b148b85b9ec044f97848654ae7c0cc966ee03e0c4830","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7805664e-3e8c-4243-909d-2c1e4bb8700c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:42400","PortSpecifier":{"PortValue":42400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7805664e-3e8c-4243-909d-2c1e4bb8700c","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7805664e-3e8c-4243-909d-2c1e4bb8700c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:42400","PortSpecifier":{"PortValue":42400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785584,"nanos":100337009},"http":{"id":"7805664e-3e8c-4243-909d-2c1e4bb8700c","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"7805664e-3e8c-4243-909d-2c1e4bb8700c"},"path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"metadata_context":{}}} {"level":"info","ts":"2026-04-21T15:33:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7805664e-3e8c-4243-909d-2c1e4bb8700c","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}} {"level":"debug","ts":"2026-04-21T15:33:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7805664e-3e8c-4243-909d-2c1e4bb8700c","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:16:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:16:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"debug","ts":"2026-04-21T15:33:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:16:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:16:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"error","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df4d342-307d-41e1-a93a-fad713286755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2282","PortSpecifier":{"PortValue":2282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9df4d342-307d-41e1-a93a-fad713286755","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9df4d342-307d-41e1-a93a-fad713286755","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2282","PortSpecifier":{"PortValue":2282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785600,"nanos":779357245},"http":{"id":"9df4d342-307d-41e1-a93a-fad713286755","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"9df4d342-307d-41e1-a93a-fad713286755","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9df4d342-307d-41e1-a93a-fad713286755","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9df4d342-307d-41e1-a93a-fad713286755","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d921ed90-efc9-4121-a904-613128ceb9f7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68e7d82a-19a5-4318-9565-b2ae9322ee6a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9df4d342-307d-41e1-a93a-fad713286755","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68e7d82a-19a5-4318-9565-b2ae9322ee6a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d921ed90-efc9-4121-a904-613128ceb9f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df4d342-307d-41e1-a93a-fad713286755","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df4d342-307d-41e1-a93a-fad713286755","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df4d342-307d-41e1-a93a-fad713286755","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9df4d342-307d-41e1-a93a-fad713286755","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df4d342-307d-41e1-a93a-fad713286755","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9df4d342-307d-41e1-a93a-fad713286755","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:13766","PortSpecifier":{"PortValue":13766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54db037b-4c98-44e4-b9c1-a9dca761e571","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:13766","PortSpecifier":{"PortValue":13766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785600,"nanos":821235063},"http":{"id":"54db037b-4c98-44e4-b9c1-a9dca761e571","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9bf66de-3357-492d-8214-45511773765b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54db037b-4c98-44e4-b9c1-a9dca761e571","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:60630","PortSpecifier":{"PortValue":60630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:60630","PortSpecifier":{"PortValue":60630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785600,"nanos":852862525},"http":{"id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9bf66de-3357-492d-8214-45511773765b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"117715d5-558e-46f4-b5eb-47ce7f7946b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:54082","PortSpecifier":{"PortValue":54082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:54082","PortSpecifier":{"PortValue":54082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785600,"nanos":883574448},"http":{"id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9bf66de-3357-492d-8214-45511773765b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"836b833d-25c5-4873-b9ae-5f47d46aa1a9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:45966","PortSpecifier":{"PortValue":45966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:45966","PortSpecifier":{"PortValue":45966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785600,"nanos":914661483},"http":{"id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"522dee13-2209-4ba6-a67e-a978cf5d35c2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7380","PortSpecifier":{"PortValue":7380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785600,"nanos":922252664},"http":{"id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-central-models-exempt-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","input":{"auth":{"identity":"Bearer **** sk-oai-1VC01tdEmDQeLsUHj_6dtFGmVgRPwGHgrtY9OQUNdBuRbGIZpcZirGFK7m2d7","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"e2e-unconfiab60ef4d3a239b5143b412cab04acac3-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"e2e-central-models-exempt-sub","x-request-id":"dc159ea7-198b-42f9-8d9c-64c107b127bf"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","method":"GET","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":922252664,"seconds":1776785600}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":7380},"address":"100.64.0.3:7380"}}}}},"destination":{"address":"10.133.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"},"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-central-models-exempt-sub"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a9bf66de-3357-492d-8214-45511773765b","selected_subscription":"e2e-central-models-exempt-sub","selected_subscription_key":"models-as-a-service/e2e-central-models-exempt-sub@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-unconfigured-facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-central-models-exempt-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc159ea7-198b-42f9-8d9c-64c107b127bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:16:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:16:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cccb9f888be4be56e16cc32e380709be54a35972abf80517f8c40fc107282b39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae65b7ddc0033e778bd82057b67fb5cd3e029782d6fd444ddefece908444945"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81a415a9d6b7bd916041b26b5a288b98c3b5bc233efb3bb1e7ca74fc032a437"} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"error","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2253a757-49ff-4624-82e8-55231cc707ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:32938","PortSpecifier":{"PortValue":32938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2253a757-49ff-4624-82e8-55231cc707ac","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2253a757-49ff-4624-82e8-55231cc707ac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:32938","PortSpecifier":{"PortValue":32938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785616,"nanos":566698980},"http":{"id":"2253a757-49ff-4624-82e8-55231cc707ac","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2253a757-49ff-4624-82e8-55231cc707ac","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2253a757-49ff-4624-82e8-55231cc707ac","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2253a757-49ff-4624-82e8-55231cc707ac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d921ed90-efc9-4121-a904-613128ceb9f7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=68e7d82a-19a5-4318-9565-b2ae9322ee6a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"]}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2253a757-49ff-4624-82e8-55231cc707ac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/0593bde36a60"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=68e7d82a-19a5-4318-9565-b2ae9322ee6a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d921ed90-efc9-4121-a904-613128ceb9f7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2253a757-49ff-4624-82e8-55231cc707ac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2253a757-49ff-4624-82e8-55231cc707ac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2253a757-49ff-4624-82e8-55231cc707ac","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2253a757-49ff-4624-82e8-55231cc707ac","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":"[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2253a757-49ff-4624-82e8-55231cc707ac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2253a757-49ff-4624-82e8-55231cc707ac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b17aa3e6-17d6-4e1b-99d8-183f3675a872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:16088","PortSpecifier":{"PortValue":16088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b17aa3e6-17d6-4e1b-99d8-183f3675a872","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b17aa3e6-17d6-4e1b-99d8-183f3675a872","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:16088","PortSpecifier":{"PortValue":16088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785616,"nanos":949847541},"http":{"id":"b17aa3e6-17d6-4e1b-99d8-183f3675a872","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b17aa3e6-17d6-4e1b-99d8-183f3675a872","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b17aa3e6-17d6-4e1b-99d8-183f3675a872","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}} {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49502","PortSpecifier":{"PortValue":49502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49502","PortSpecifier":{"PortValue":49502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785616,"nanos":974971292},"http":{"id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"83","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.2","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-request-id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}} {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b84f8159-841e-4d5d-8821-e70fa8cd3e66","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}} {"level":"info","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:32952","PortSpecifier":{"PortValue":32952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbdff690-1ff0-47f3-8550-69e70d664f32","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:32952","PortSpecifier":{"PortValue":32952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785616,"nanos":997198070},"http":{"id":"cbdff690-1ff0-47f3-8550-69e70d664f32","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dv2pjqCPUVJYN2Nq_wTbukKB1ulCWiPNuySQ1IAHMSCWOTTF9GuZ9td5lRjl"} {"level":"debug","ts":"2026-04-21T15:33:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dv2pjqCPUVJYN2Nq_wTbukKB1ulCWiPNuySQ1IAHMSCWOTTF9GuZ9td5lRjl\"}"} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","namespace":"llm","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3f97f70a-1a04-41d5-bd8b-c140ab83a9c4","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","namespace":"llm","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbdff690-1ff0-47f3-8550-69e70d664f32","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-04-21T15:33:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"error","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-04-21T15:33:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-04-21T15:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"} {"level":"info","ts":"2026-04-21T15:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33e58f39cf4e0d944ce934a5018acdcfa74a705ab4b8890a72a2529f341cdcf4"} {"level":"info","ts":"2026-04-21T15:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8529f271698b5a3bc9025c33c0ecd15ded96a8c2fb76e9818941deb66b0dcc98"} {"level":"info","ts":"2026-04-21T15:34:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"} {"level":"info","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:41610","PortSpecifier":{"PortValue":41610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:41610","PortSpecifier":{"PortValue":41610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785654,"nanos":864431374},"http":{"id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29f02670-4aaa-4e22-b5b5-78589d290bf3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"} {"level":"info","ts":"2026-04-21T15:34:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3174635d626d01417a9ea6e7e44f66ab5759eab01406d407db2e4b6e08e42016"} {"level":"info","ts":"2026-04-21T15:34:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"} {"level":"info","ts":"2026-04-21T15:34:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d127e164a8bca0cf424b571951b72a15565cdd1b6a3edcc64b640ecaf71b0c52"} {"level":"info","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"676f313d-8531-42ee-9370-7597a5c72abb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18182","PortSpecifier":{"PortValue":18182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"676f313d-8531-42ee-9370-7597a5c72abb","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"676f313d-8531-42ee-9370-7597a5c72abb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:18182","PortSpecifier":{"PortValue":18182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785659,"nanos":897351931},"http":{"id":"676f313d-8531-42ee-9370-7597a5c72abb","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"676f313d-8531-42ee-9370-7597a5c72abb","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"676f313d-8531-42ee-9370-7597a5c72abb","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676f313d-8531-42ee-9370-7597a5c72abb","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676f313d-8531-42ee-9370-7597a5c72abb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676f313d-8531-42ee-9370-7597a5c72abb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676f313d-8531-42ee-9370-7597a5c72abb","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676f313d-8531-42ee-9370-7597a5c72abb","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"676f313d-8531-42ee-9370-7597a5c72abb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"676f313d-8531-42ee-9370-7597a5c72abb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:31336","PortSpecifier":{"PortValue":31336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c746f31d-0904-4d97-aa4b-3502b72b818f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:31336","PortSpecifier":{"PortValue":31336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785664,"nanos":935628324},"http":{"id":"c746f31d-0904-4d97-aa4b-3502b72b818f","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c746f31d-0904-4d97-aa4b-3502b72b818f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f328a31-ebff-49ba-9007-578bc144c842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:4604","PortSpecifier":{"PortValue":4604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f328a31-ebff-49ba-9007-578bc144c842","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f328a31-ebff-49ba-9007-578bc144c842","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:4604","PortSpecifier":{"PortValue":4604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785669,"nanos":967117625},"http":{"id":"1f328a31-ebff-49ba-9007-578bc144c842","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f328a31-ebff-49ba-9007-578bc144c842","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f328a31-ebff-49ba-9007-578bc144c842","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f328a31-ebff-49ba-9007-578bc144c842","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f328a31-ebff-49ba-9007-578bc144c842","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f328a31-ebff-49ba-9007-578bc144c842","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f328a31-ebff-49ba-9007-578bc144c842","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f328a31-ebff-49ba-9007-578bc144c842","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f328a31-ebff-49ba-9007-578bc144c842","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f328a31-ebff-49ba-9007-578bc144c842","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"804b3969-da02-49ce-a20e-f33353abc7ab","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:44224","PortSpecifier":{"PortValue":44224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785675,"nanos":5056042},"http":{"id":"804b3969-da02-49ce-a20e-f33353abc7ab","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"804b3969-da02-49ce-a20e-f33353abc7ab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:37296","PortSpecifier":{"PortValue":37296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"967beeca-7c0e-474d-b035-e7a78dece3f1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:37296","PortSpecifier":{"PortValue":37296}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785680,"nanos":44064033},"http":{"id":"967beeca-7c0e-474d-b035-e7a78dece3f1","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785954,"groups":["Engineering","Project-Alpha"],"iat":1776785654,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:9a00e554-cf11-01de-a789-41b83de862df","preferred_username":"alice_lead","scope":"profile email","sid":"qYR9NKoipstqOAq3_Nl_0P5k","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"967beeca-7c0e-474d-b035-e7a78dece3f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:36870","PortSpecifier":{"PortValue":36870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f73e6844-870a-4176-a4cf-78e403cfca99","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:36870","PortSpecifier":{"PortValue":36870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785680,"nanos":165319446},"http":{"id":"f73e6844-870a-4176-a4cf-78e403cfca99","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f73e6844-870a-4176-a4cf-78e403cfca99","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""},{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""}]}} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1080","PortSpecifier":{"PortValue":1080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1080","PortSpecifier":{"PortValue":1080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785680,"nanos":233919882},"http":{"id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NDVjNmI0YjQ4LTQ4OXA3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17"},"path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"metadata_context":{}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"306b5b5d-04bd-4a22-83dc-31010f7d0b17","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""},{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""}]}} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23588c56-875f-4c7f-809e-57fccd3c5f9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:48458","PortSpecifier":{"PortValue":48458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23588c56-875f-4c7f-809e-57fccd3c5f9e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23588c56-875f-4c7f-809e-57fccd3c5f9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:48458","PortSpecifier":{"PortValue":48458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785680,"nanos":261547687},"http":{"id":"23588c56-875f-4c7f-809e-57fccd3c5f9e","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.opendatahub.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"23588c56-875f-4c7f-809e-57fccd3c5f9e"},"path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"metadata_context":{}}} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23588c56-875f-4c7f-809e-57fccd3c5f9e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23588c56-875f-4c7f-809e-57fccd3c5f9e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""},{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""}]}} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:58300","PortSpecifier":{"PortValue":58300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:58300","PortSpecifier":{"PortValue":58300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785680,"nanos":639634196},"http":{"id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Site-Reliability"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6accc1da-54cc-3539-244f-4a51ed46628f","preferred_username":"bob_sre","scope":"profile email","sid":"bXS6MiR5J9F7SnNbPxy7ZDHa","sub":"e153c28f-8e27-4a9e-a02d-c4daed455a26","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Site-Reliability"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6accc1da-54cc-3539-244f-4a51ed46628f","preferred_username":"bob_sre","scope":"profile email","sid":"bXS6MiR5J9F7SnNbPxy7ZDHa","sub":"e153c28f-8e27-4a9e-a02d-c4daed455a26","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ead23ab-944e-4ce5-9b36-3492e47d5131","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54054","PortSpecifier":{"PortValue":54054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54054","PortSpecifier":{"PortValue":54054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785680,"nanos":862175548},"http":{"id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a03a44c8-1a22-4961-bdbe-634d9f4085ef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:36884","PortSpecifier":{"PortValue":36884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:36884","PortSpecifier":{"PortValue":36884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785685,"nanos":890190456},"http":{"id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfbabf7-3009-406c-9e8e-9e0402436f3f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:25834","PortSpecifier":{"PortValue":25834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:25834","PortSpecifier":{"PortValue":25834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785690,"nanos":919423842},"http":{"id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f93df228-f6b4-4edf-ad46-a4b684e1b48e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29762","PortSpecifier":{"PortValue":29762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cac98534-3390-4511-b8fd-b305b1d087a6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:29762","PortSpecifier":{"PortValue":29762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785695,"nanos":949435661},"http":{"id":"cac98534-3390-4511-b8fd-b305b1d087a6","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:34:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cac98534-3390-4511-b8fd-b305b1d087a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42964","PortSpecifier":{"PortValue":42964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08a006f6-30b0-4b47-8548-bd75f017b15b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42964","PortSpecifier":{"PortValue":42964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785700,"nanos":976728206},"http":{"id":"08a006f6-30b0-4b47-8548-bd75f017b15b","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08a006f6-30b0-4b47-8548-bd75f017b15b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:19530","PortSpecifier":{"PortValue":19530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:19530","PortSpecifier":{"PortValue":19530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785706,"nanos":13671480},"http":{"id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776785980,"groups":["Engineering","Project-Alpha"],"iat":1776785680,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6c6e2204-0136-b52c-29aa-81f6cfd65bb4","preferred_username":"alice_lead","scope":"profile email","sid":"mLNAOgpVr74b7tUML9-yQfF5","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a2ac2ed-1b55-4e31-b945-6ef92aad5ff7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44940","PortSpecifier":{"PortValue":44940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44940","PortSpecifier":{"PortValue":44940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785706,"nanos":58334750},"http":{"id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1\"}"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"385c2519-cbfb-40a3-877c-837d4d42ff9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abf707b0-24f7-4b26-889d-1b097497095d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46678","PortSpecifier":{"PortValue":46678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abf707b0-24f7-4b26-889d-1b097497095d","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abf707b0-24f7-4b26-889d-1b097497095d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46678","PortSpecifier":{"PortValue":46678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785706,"nanos":86868356},"http":{"id":"abf707b0-24f7-4b26-889d-1b097497095d","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1\"}"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"\\u003cnil\\u003e\"}"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abf707b0-24f7-4b26-889d-1b097497095d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"abf707b0-24f7-4b26-889d-1b097497095d"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"abf707b0-24f7-4b26-889d-1b097497095d","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":86868356,"seconds":1776785706},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:46678","port":46678}}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abf707b0-24f7-4b26-889d-1b097497095d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"7dd30238-028f-41d0-ac1b-7dbcbbba4134","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":""}} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abf707b0-24f7-4b26-889d-1b097497095d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abf707b0-24f7-4b26-889d-1b097497095d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15504","PortSpecifier":{"PortValue":15504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15504","PortSpecifier":{"PortValue":15504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785706,"nanos":120095876},"http":{"id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-z5dY0ZlvSHhquIeZ_Ph69943GXI37nhzt9ivEeyS5XSdtTywoz1TmdjA2BF1\"}"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"\\u003cnil\\u003e\"}"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"5aa0fd746a1cbe4557cf771f0b5f5c4020da5a6444c58d701a6d039232d7faab"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"7dd30238-028f-41d0-ac1b-7dbcbbba4134","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":""}} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03603629-1a9e-4bf9-9a2f-702eab48b01d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44946","PortSpecifier":{"PortValue":44946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de407dd2-21c3-4488-9efb-fb7961db51f6","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:44946","PortSpecifier":{"PortValue":44946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785706,"nanos":224402435},"http":{"id":"de407dd2-21c3-4488-9efb-fb7961db51f6","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de407dd2-21c3-4488-9efb-fb7961db51f6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46688","PortSpecifier":{"PortValue":46688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:46688","PortSpecifier":{"PortValue":46688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785711,"nanos":261173435},"http":{"id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a4f4e42-2dca-4fd7-896a-2c87c37a7233","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea6379ea-76be-4246-8135-d59954044519","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13410","PortSpecifier":{"PortValue":13410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea6379ea-76be-4246-8135-d59954044519","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea6379ea-76be-4246-8135-d59954044519","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:13410","PortSpecifier":{"PortValue":13410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785716,"nanos":292371796},"http":{"id":"ea6379ea-76be-4246-8135-d59954044519","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea6379ea-76be-4246-8135-d59954044519","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea6379ea-76be-4246-8135-d59954044519","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea6379ea-76be-4246-8135-d59954044519","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6379ea-76be-4246-8135-d59954044519","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6379ea-76be-4246-8135-d59954044519","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6379ea-76be-4246-8135-d59954044519","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea6379ea-76be-4246-8135-d59954044519","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea6379ea-76be-4246-8135-d59954044519","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea6379ea-76be-4246-8135-d59954044519","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:13632","PortSpecifier":{"PortValue":13632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:13632","PortSpecifier":{"PortValue":13632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785721,"nanos":321446653},"http":{"id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7ad8f13-57eb-4cc8-8084-2dcdbfaff0ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:24470","PortSpecifier":{"PortValue":24470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"108c9bd7-b223-4595-96a1-a43bda2631ed","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:24470","PortSpecifier":{"PortValue":24470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785726,"nanos":352767690},"http":{"id":"108c9bd7-b223-4595-96a1-a43bda2631ed","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"108c9bd7-b223-4595-96a1-a43bda2631ed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43558","PortSpecifier":{"PortValue":43558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","method":"DELETE","path":"/maas-api/v1/api-keys/e1359c0b-48ff-4b97-bc59-3f9dfbff5d16","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:43558","PortSpecifier":{"PortValue":43558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785726,"nanos":380122458},"http":{"id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e1359c0b-48ff-4b97-bc59-3f9dfbff5d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e1359c0b-48ff-4b97-bc59-3f9dfbff5d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707478a1-2174-4ffb-9bc4-8aee1557e74c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39430","PortSpecifier":{"PortValue":39430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","method":"DELETE","path":"/maas-api/v1/api-keys/e1359c0b-48ff-4b97-bc59-3f9dfbff5d16","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:39430","PortSpecifier":{"PortValue":39430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785731,"nanos":412067205},"http":{"id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e1359c0b-48ff-4b97-bc59-3f9dfbff5d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786006,"groups":["Engineering","Project-Alpha"],"iat":1776785706,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:588a54c6-205b-1d01-9cb5-51fe6e6bb4fd","preferred_username":"alice_lead","scope":"profile email","sid":"LNNWINQGf-Dw_LYjnHiYPYEk","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e1359c0b-48ff-4b97-bc59-3f9dfbff5d16",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f1bc9f-85e0-4c12-9e4d-8de87a037372","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c980d056-8734-4413-b47c-8981528e93bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:40550","PortSpecifier":{"PortValue":40550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c980d056-8734-4413-b47c-8981528e93bd","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c980d056-8734-4413-b47c-8981528e93bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:40550","PortSpecifier":{"PortValue":40550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785731,"nanos":613122303},"http":{"id":"c980d056-8734-4413-b47c-8981528e93bd","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c980d056-8734-4413-b47c-8981528e93bd","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c980d056-8734-4413-b47c-8981528e93bd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"c980d056-8734-4413-b47c-8981528e93bd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"} {"level":"info","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c980d056-8734-4413-b47c-8981528e93bd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c980d056-8734-4413-b47c-8981528e93bd","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""},{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""}]}} {"level":"info","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22444","PortSpecifier":{"PortValue":22444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c245fec4-efcb-4128-89c0-5703e8e6305c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:22444","PortSpecifier":{"PortValue":22444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785731,"nanos":800351330},"http":{"id":"c245fec4-efcb-4128-89c0-5703e8e6305c","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c245fec4-efcb-4128-89c0-5703e8e6305c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"890d7b10-b312-483f-a791-7294db72d288","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39816","PortSpecifier":{"PortValue":39816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"890d7b10-b312-483f-a791-7294db72d288","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"890d7b10-b312-483f-a791-7294db72d288","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39816","PortSpecifier":{"PortValue":39816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785736,"nanos":830712090},"http":{"id":"890d7b10-b312-483f-a791-7294db72d288","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"890d7b10-b312-483f-a791-7294db72d288","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"890d7b10-b312-483f-a791-7294db72d288","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"890d7b10-b312-483f-a791-7294db72d288","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890d7b10-b312-483f-a791-7294db72d288","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890d7b10-b312-483f-a791-7294db72d288","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890d7b10-b312-483f-a791-7294db72d288","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"890d7b10-b312-483f-a791-7294db72d288","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"890d7b10-b312-483f-a791-7294db72d288","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"890d7b10-b312-483f-a791-7294db72d288","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5890","PortSpecifier":{"PortValue":5890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:5890","PortSpecifier":{"PortValue":5890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785741,"nanos":863754987},"http":{"id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ac826ee-85cc-4134-977c-c9b93e27d0d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54658","PortSpecifier":{"PortValue":54658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54658","PortSpecifier":{"PortValue":54658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785746,"nanos":897339961},"http":{"id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28dcfcc3-fd61-4836-8c7a-066dddab8b6b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:34078","PortSpecifier":{"PortValue":34078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:34078","PortSpecifier":{"PortValue":34078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785751,"nanos":929479526},"http":{"id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffec36b6-99be-4bfb-a25b-e4df1c3e1ba7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061526e8-c6e9-4a81-922f-657fefafb088","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53394","PortSpecifier":{"PortValue":53394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"061526e8-c6e9-4a81-922f-657fefafb088","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061526e8-c6e9-4a81-922f-657fefafb088","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53394","PortSpecifier":{"PortValue":53394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785756,"nanos":964506119},"http":{"id":"061526e8-c6e9-4a81-922f-657fefafb088","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"061526e8-c6e9-4a81-922f-657fefafb088","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"061526e8-c6e9-4a81-922f-657fefafb088","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Engineering","Project-Alpha"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:50b22165-1c7c-8fdf-40f1-3b1afaaad428","preferred_username":"alice_lead","scope":"profile email","sid":"5jyhlP9iKHT-bvE0cJtE8W9d","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061526e8-c6e9-4a81-922f-657fefafb088","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061526e8-c6e9-4a81-922f-657fefafb088","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061526e8-c6e9-4a81-922f-657fefafb088","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061526e8-c6e9-4a81-922f-657fefafb088","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061526e8-c6e9-4a81-922f-657fefafb088","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061526e8-c6e9-4a81-922f-657fefafb088","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061526e8-c6e9-4a81-922f-657fefafb088","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14484","PortSpecifier":{"PortValue":14484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:14484","PortSpecifier":{"PortValue":14484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785756,"nanos":994139916},"http":{"id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Site-Reliability"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c64b657c-01b3-93ed-109c-c0a51f3d8ddf","preferred_username":"bob_sre","scope":"profile email","sid":"4BEurn9UOmTT5Idyu0jP61CC","sub":"e153c28f-8e27-4a9e-a02d-c4daed455a26","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786031,"groups":["Site-Reliability"],"iat":1776785731,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:c64b657c-01b3-93ed-109c-c0a51f3d8ddf","preferred_username":"bob_sre","scope":"profile email","sid":"4BEurn9UOmTT5Idyu0jP61CC","sub":"e153c28f-8e27-4a9e-a02d-c4daed455a26","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e8cc97-4163-4ac4-bfa8-cd762871f1dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60998","PortSpecifier":{"PortValue":60998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:60998","PortSpecifier":{"PortValue":60998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785757,"nanos":91193681},"http":{"id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:35:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0aa10a5-8da8-473e-82f1-2f10abc19663","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53192","PortSpecifier":{"PortValue":53192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c32ef494-1508-4779-9409-488cca0b3ff3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:53192","PortSpecifier":{"PortValue":53192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785762,"nanos":123150885},"http":{"id":"c32ef494-1508-4779-9409-488cca0b3ff3","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c32ef494-1508-4779-9409-488cca0b3ff3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d547b03-4d56-4203-9444-700c495f063d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:48930","PortSpecifier":{"PortValue":48930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d547b03-4d56-4203-9444-700c495f063d","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d547b03-4d56-4203-9444-700c495f063d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:48930","PortSpecifier":{"PortValue":48930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785762,"nanos":157453746},"http":{"id":"5d547b03-4d56-4203-9444-700c495f063d","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d547b03-4d56-4203-9444-700c495f063d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d547b03-4d56-4203-9444-700c495f063d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d547b03-4d56-4203-9444-700c495f063d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d547b03-4d56-4203-9444-700c495f063d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d547b03-4d56-4203-9444-700c495f063d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d547b03-4d56-4203-9444-700c495f063d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d547b03-4d56-4203-9444-700c495f063d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d547b03-4d56-4203-9444-700c495f063d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d547b03-4d56-4203-9444-700c495f063d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a093974-bece-4c53-a523-1671ecefd53a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:63240","PortSpecifier":{"PortValue":63240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a093974-bece-4c53-a523-1671ecefd53a","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a093974-bece-4c53-a523-1671ecefd53a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:63240","PortSpecifier":{"PortValue":63240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785767,"nanos":193050584},"http":{"id":"3a093974-bece-4c53-a523-1671ecefd53a","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a093974-bece-4c53-a523-1671ecefd53a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a093974-bece-4c53-a523-1671ecefd53a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a093974-bece-4c53-a523-1671ecefd53a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a093974-bece-4c53-a523-1671ecefd53a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a093974-bece-4c53-a523-1671ecefd53a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a093974-bece-4c53-a523-1671ecefd53a","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a093974-bece-4c53-a523-1671ecefd53a","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a093974-bece-4c53-a523-1671ecefd53a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a093974-bece-4c53-a523-1671ecefd53a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:41968","PortSpecifier":{"PortValue":41968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785772,"nanos":223293932},"http":{"id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1eafd0b8-dc04-4ee8-a590-11d67ff4b22d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40914","PortSpecifier":{"PortValue":40914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:40914","PortSpecifier":{"PortValue":40914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785777,"nanos":256568944},"http":{"id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cddc64e-1531-4c6f-9c4c-bc44988ce898","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:38020","PortSpecifier":{"PortValue":38020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:38020","PortSpecifier":{"PortValue":38020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785782,"nanos":287765173},"http":{"id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e823c829-1b83-4958-ba45-1f5dfa316c7d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43126","PortSpecifier":{"PortValue":43126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:43126","PortSpecifier":{"PortValue":43126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785787,"nanos":321942793},"http":{"id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04a210d2-b05b-9f63-bbe9-2b468056d8d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1084","PortSpecifier":{"PortValue":1084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:1084","PortSpecifier":{"PortValue":1084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785792,"nanos":353461481},"http":{"id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c8b54f4-8f40-4570-a2a3-60fb8ec216e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54066","PortSpecifier":{"PortValue":54066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:54066","PortSpecifier":{"PortValue":54066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785792,"nanos":386029553},"http":{"id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1f4f8fe-e3a2-4ae7-b069-22e2cc2b383a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9644","PortSpecifier":{"PortValue":9644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:9644","PortSpecifier":{"PortValue":9644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785797,"nanos":414676925},"http":{"id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bb26497-6fe6-45c8-aa82-b83803f145d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56198","PortSpecifier":{"PortValue":56198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56198","PortSpecifier":{"PortValue":56198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785802,"nanos":447088958},"http":{"id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6f7c8be-cd1f-4b3e-b563-5d9db5520dca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4640","PortSpecifier":{"PortValue":4640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a455fc2d-5886-4e1f-a275-916a64993f03","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4640","PortSpecifier":{"PortValue":4640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785807,"nanos":481332095},"http":{"id":"a455fc2d-5886-4e1f-a275-916a64993f03","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a455fc2d-5886-4e1f-a275-916a64993f03","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85909367-b249-4a73-ba67-92415baedaa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7870","PortSpecifier":{"PortValue":7870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85909367-b249-4a73-ba67-92415baedaa3","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85909367-b249-4a73-ba67-92415baedaa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7870","PortSpecifier":{"PortValue":7870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785812,"nanos":514089350},"http":{"id":"85909367-b249-4a73-ba67-92415baedaa3","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85909367-b249-4a73-ba67-92415baedaa3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85909367-b249-4a73-ba67-92415baedaa3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85909367-b249-4a73-ba67-92415baedaa3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85909367-b249-4a73-ba67-92415baedaa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85909367-b249-4a73-ba67-92415baedaa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85909367-b249-4a73-ba67-92415baedaa3","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85909367-b249-4a73-ba67-92415baedaa3","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85909367-b249-4a73-ba67-92415baedaa3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85909367-b249-4a73-ba67-92415baedaa3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15926","PortSpecifier":{"PortValue":15926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d382073-6165-43f7-8abd-b6cca51660a0","method":"DELETE","path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15926","PortSpecifier":{"PortValue":15926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785817,"nanos":545378552},"http":{"id":"2d382073-6165-43f7-8abd-b6cca51660a0","method":"DELETE","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786057,"groups":["Engineering","Project-Alpha"],"iat":1776785757,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ccb56885-3671-d6db-21bb-2ead097b56d1","preferred_username":"alice_lead","scope":"profile email","sid":"dDYNTrsG5yg1TglrRUWN2ICr","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/bd9623f5-257f-4e5a-9f62-569d09755152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d382073-6165-43f7-8abd-b6cca51660a0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1405c73d-d463-486e-a69a-df2657352513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:40944","PortSpecifier":{"PortValue":40944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1405c73d-d463-486e-a69a-df2657352513","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1405c73d-d463-486e-a69a-df2657352513","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:40944","PortSpecifier":{"PortValue":40944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785817,"nanos":653843094},"http":{"id":"1405c73d-d463-486e-a69a-df2657352513","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1405c73d-d463-486e-a69a-df2657352513","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0f779c83-c5ff-4432-db69-e59481a4f591","preferred_username":"alice_lead","scope":"profile email","sid":"geiNVyc4em0JIFCIqlli2oYW","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1405c73d-d463-486e-a69a-df2657352513","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:0f779c83-c5ff-4432-db69-e59481a4f591","preferred_username":"alice_lead","scope":"profile email","sid":"geiNVyc4em0JIFCIqlli2oYW","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1405c73d-d463-486e-a69a-df2657352513","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1405c73d-d463-486e-a69a-df2657352513","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1405c73d-d463-486e-a69a-df2657352513","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1405c73d-d463-486e-a69a-df2657352513","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1405c73d-d463-486e-a69a-df2657352513","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1405c73d-d463-486e-a69a-df2657352513","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1405c73d-d463-486e-a69a-df2657352513","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:3958","PortSpecifier":{"PortValue":3958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:3958","PortSpecifier":{"PortValue":3958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785817,"nanos":682835707},"http":{"id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2vvrnpUm6yggtWH1_4QiIBofP6B7Y1cDnxIOodeaCBx6GhKTDqulwWHVuDj"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2vvrnpUm6yggtWH1_4QiIBofP6B7Y1cDnxIOodeaCBx6GhKTDqulwWHVuDj\"}"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42cc92c7-1b91-4a05-bc1f-b9baf265b1e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19432","PortSpecifier":{"PortValue":19432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19432","PortSpecifier":{"PortValue":19432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785817,"nanos":710355154},"http":{"id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2vvrnpUm6yggtWH1_4QiIBofP6B7Y1cDnxIOodeaCBx6GhKTDqulwWHVuDj"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2vvrnpUm6yggtWH1_4QiIBofP6B7Y1cDnxIOodeaCBx6GhKTDqulwWHVuDj\"}"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"\\u003cnil\\u003e\"}"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"e716e70ac29d4c7bea453bb99861c5f15b3d9860b623d5ef2c7badd4e1cb9bc9"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-2vvrnpUm6yggtWH1_4QiIBofP6B7Y1cDnxIOodeaCBx6GhKTDqulwWHVuDj","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":710355154,"seconds":1776785817},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.3:19432","port":19432}}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"271e9252-4348-4839-927e-f88f2f214ad3","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":""}} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec50b6c-d025-4e40-9a3c-e8546e254a4c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15934","PortSpecifier":{"PortValue":15934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:15934","PortSpecifier":{"PortValue":15934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785817,"nanos":811166140},"http":{"id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:36:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b35d1fb6-dc06-4706-a6b8-2091c981a43b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:19016","PortSpecifier":{"PortValue":19016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97ccde02-a1c5-4cbb-b156-b591452a250d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:19016","PortSpecifier":{"PortValue":19016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785822,"nanos":846364766},"http":{"id":"97ccde02-a1c5-4cbb-b156-b591452a250d","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97ccde02-a1c5-4cbb-b156-b591452a250d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:16156","PortSpecifier":{"PortValue":16156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:16156","PortSpecifier":{"PortValue":16156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785827,"nanos":884498065},"http":{"id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a66ba9-6033-4aeb-8f84-14181c3fdba2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32776","PortSpecifier":{"PortValue":32776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:32776","PortSpecifier":{"PortValue":32776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785832,"nanos":914730821},"http":{"id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7f97ff0-c6f0-4d42-aed0-f8d5dda55f18","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17376","PortSpecifier":{"PortValue":17376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:17376","PortSpecifier":{"PortValue":17376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785837,"nanos":954081803},"http":{"id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b72ec22-7eb6-950d-963f-8f7bf0f43487","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58850","PortSpecifier":{"PortValue":58850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58850","PortSpecifier":{"PortValue":58850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785842,"nanos":992312656},"http":{"id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9afd231f-36fe-412a-8ab1-3961be4a3fd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64782","PortSpecifier":{"PortValue":64782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64782","PortSpecifier":{"PortValue":64782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785848,"nanos":37640022},"http":{"id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d3d0ec7-3346-4d70-b14f-6d97b6510d1c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:21736","PortSpecifier":{"PortValue":21736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:21736","PortSpecifier":{"PortValue":21736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785853,"nanos":68299001},"http":{"id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5446741-bee3-4ba3-b506-da0ae334ce6e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15010","PortSpecifier":{"PortValue":15010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:15010","PortSpecifier":{"PortValue":15010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785858,"nanos":102401688},"http":{"id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0afb9dd-8c83-4511-8241-f0f1af848c97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:59658","PortSpecifier":{"PortValue":59658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"370074dc-5f61-4b5b-a8bb-a814cb382339","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:59658","PortSpecifier":{"PortValue":59658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785863,"nanos":136646536},"http":{"id":"370074dc-5f61-4b5b-a8bb-a814cb382339","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"370074dc-5f61-4b5b-a8bb-a814cb382339","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad76c584-1458-4360-80be-784faf640e23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:58724","PortSpecifier":{"PortValue":58724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad76c584-1458-4360-80be-784faf640e23","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad76c584-1458-4360-80be-784faf640e23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:58724","PortSpecifier":{"PortValue":58724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785868,"nanos":169637873},"http":{"id":"ad76c584-1458-4360-80be-784faf640e23","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad76c584-1458-4360-80be-784faf640e23","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad76c584-1458-4360-80be-784faf640e23","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad76c584-1458-4360-80be-784faf640e23","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad76c584-1458-4360-80be-784faf640e23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad76c584-1458-4360-80be-784faf640e23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad76c584-1458-4360-80be-784faf640e23","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad76c584-1458-4360-80be-784faf640e23","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad76c584-1458-4360-80be-784faf640e23","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad76c584-1458-4360-80be-784faf640e23","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb668984-1974-4230-baee-97fa12ddfac8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:26918","PortSpecifier":{"PortValue":26918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb668984-1974-4230-baee-97fa12ddfac8","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb668984-1974-4230-baee-97fa12ddfac8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:26918","PortSpecifier":{"PortValue":26918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785873,"nanos":201269389},"http":{"id":"cb668984-1974-4230-baee-97fa12ddfac8","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb668984-1974-4230-baee-97fa12ddfac8","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb668984-1974-4230-baee-97fa12ddfac8","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786117,"groups":["Engineering","Project-Alpha"],"iat":1776785817,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:7b280cf3-65fa-92a8-65a3-0c6bc70feafe","preferred_username":"alice_lead","scope":"profile email","sid":"dxPlfIoNu6vQgjcEVTtkCS2e","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb668984-1974-4230-baee-97fa12ddfac8","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb668984-1974-4230-baee-97fa12ddfac8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb668984-1974-4230-baee-97fa12ddfac8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb668984-1974-4230-baee-97fa12ddfac8","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb668984-1974-4230-baee-97fa12ddfac8","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb668984-1974-4230-baee-97fa12ddfac8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb668984-1974-4230-baee-97fa12ddfac8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67fc2714-15b5-47c2-a994-985e704c1523","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7996","PortSpecifier":{"PortValue":7996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67fc2714-15b5-47c2-a994-985e704c1523","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67fc2714-15b5-47c2-a994-985e704c1523","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:7996","PortSpecifier":{"PortValue":7996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785873,"nanos":308976961},"http":{"id":"67fc2714-15b5-47c2-a994-985e704c1523","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67fc2714-15b5-47c2-a994-985e704c1523","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67fc2714-15b5-47c2-a994-985e704c1523","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67fc2714-15b5-47c2-a994-985e704c1523","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67fc2714-15b5-47c2-a994-985e704c1523","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67fc2714-15b5-47c2-a994-985e704c1523","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67fc2714-15b5-47c2-a994-985e704c1523","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67fc2714-15b5-47c2-a994-985e704c1523","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67fc2714-15b5-47c2-a994-985e704c1523","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67fc2714-15b5-47c2-a994-985e704c1523","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:57742","PortSpecifier":{"PortValue":57742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:57742","PortSpecifier":{"PortValue":57742}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785878,"nanos":342326341},"http":{"id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:37:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c9a4aa5-a57f-96c8-91cb-70fe511726b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:5068","PortSpecifier":{"PortValue":5068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:5068","PortSpecifier":{"PortValue":5068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785883,"nanos":374811444},"http":{"id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191c94d1-f86a-42d2-ab7a-b5f611982d13","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:17598","PortSpecifier":{"PortValue":17598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81762310-b52a-4ade-82e3-6577b5ebd59f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:17598","PortSpecifier":{"PortValue":17598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785888,"nanos":410283452},"http":{"id":"81762310-b52a-4ade-82e3-6577b5ebd59f","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81762310-b52a-4ade-82e3-6577b5ebd59f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa05c298-a453-4805-b33f-9104b7477f97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:8624","PortSpecifier":{"PortValue":8624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa05c298-a453-4805-b33f-9104b7477f97","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa05c298-a453-4805-b33f-9104b7477f97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:8624","PortSpecifier":{"PortValue":8624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785893,"nanos":444437752},"http":{"id":"fa05c298-a453-4805-b33f-9104b7477f97","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa05c298-a453-4805-b33f-9104b7477f97","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa05c298-a453-4805-b33f-9104b7477f97","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786173,"groups":["Engineering","Project-Alpha"],"iat":1776785873,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:35c8ee3d-a3d5-7b75-d44e-7f742155219d","preferred_username":"alice_lead","scope":"profile email","sid":"oJkWwOWM_aGUmo7hB1v-Ku74","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa05c298-a453-4805-b33f-9104b7477f97","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa05c298-a453-4805-b33f-9104b7477f97","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa05c298-a453-4805-b33f-9104b7477f97","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa05c298-a453-4805-b33f-9104b7477f97","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa05c298-a453-4805-b33f-9104b7477f97","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa05c298-a453-4805-b33f-9104b7477f97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa05c298-a453-4805-b33f-9104b7477f97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61432","PortSpecifier":{"PortValue":61432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:61432","PortSpecifier":{"PortValue":61432}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785893,"nanos":477008502},"http":{"id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5\"}"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a398c68-b11d-43a4-bd30-b5a5d7664310","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49492","PortSpecifier":{"PortValue":49492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b45fb000-35c1-471d-bb5a-41d0467028cf","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49492","PortSpecifier":{"PortValue":49492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785893,"nanos":505105122},"http":{"id":"b45fb000-35c1-471d-bb5a-41d0467028cf","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5\"}"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"\\u003cnil\\u003e\"}"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"b45fb000-35c1-471d-bb5a-41d0467028cf"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"b45fb000-35c1-471d-bb5a-41d0467028cf","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":505105122,"seconds":1776785893},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.2:49492","port":49492}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"e07d172a-1ee1-40b4-8b7e-c2dc2adf248f","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":""}} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b45fb000-35c1-471d-bb5a-41d0467028cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3758","PortSpecifier":{"PortValue":3758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"339a627c-fb1d-45b9-a644-354eb3397cdc","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3758","PortSpecifier":{"PortValue":3758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785893,"nanos":536117709},"http":{"id":"339a627c-fb1d-45b9-a644-354eb3397cdc","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5\"}"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":{"Name":"api-key-valid","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":""} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"339a627c-fb1d-45b9-a644-354eb3397cdc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49492","PortSpecifier":{"PortValue":49492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3fcce1a-29c6-484d-8242-b348e3fec091","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:49492","PortSpecifier":{"PortValue":49492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785893,"nanos":542034850},"http":{"id":"b3fcce1a-29c6-484d-8242-b348e3fec091","method":"GET","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5\"}"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"\\u003cnil\\u003e\"}"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-TrwCeQYbURPN3k7T_X2dquGtUh1HuspGJuCAuONMSNnGqkW88VYLfmBqZmq5","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NDVjNmI0YjQ4LTQ4OXA3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.44~maas-default-gateway-openshift-default-845c6b4b48-489p7.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"b3fcce1a-29c6-484d-8242-b348e3fec091"},"host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","id":"b3fcce1a-29c6-484d-8242-b348e3fec091","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":542034850,"seconds":1776785893},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"100.64.0.2:49492","port":49492}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"e07d172a-1ee1-40b4-8b7e-c2dc2adf248f","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"name":"facebook-opt-125m-simulated","namespace":"llm","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":""}} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3fcce1a-29c6-484d-8242-b348e3fec091","authorized":true,"response":"OK"} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2140","PortSpecifier":{"PortValue":2140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:2140","PortSpecifier":{"PortValue":2140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1776785893,"nanos":647550931},"http":{"id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","method":"POST","headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786193,"groups":["Engineering","Project-Alpha"],"iat":1776785893,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b1ffe8c8-7c3f-0478-d0e4-8eb6ac81cc5f","preferred_username":"alice_lead","scope":"profile email","sid":"dxWp2DMjR7bmV0cqc-xtGGKV","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1776786193,"groups":["Engineering","Project-Alpha"],"iat":1776785893,"iss":"https://keycloak.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b1ffe8c8-7c3f-0478-d0e4-8eb6ac81cc5f","preferred_username":"alice_lead","scope":"profile email","sid":"dxWp2DMjR7bmV0cqc-xtGGKV","sub":"d99b1129-57c3-497b-996e-c0a793395020","typ":"Bearer"}},"context":{"context_extensions":{"host":"d44d6970f0ac9b448c729a344c019166492f90c7945285882c656b64a6725911"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c55b3d15-2aa0-4c09-b509-0593bde36a60.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","config":{"Name":"X-MaaS-Group-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.groups.@tostr"}}},"object":null} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","config":{"Name":"X-MaaS-Username-OC","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.identity.user.username"}}},"object":null} {"level":"info","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-04-21T15:38:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e33bcba2-9c87-4ca1-a9b7-75ac53b312e1","authorized":true,"response":"OK"}