--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c"}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c"}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"debug","ts":"2026-06-09T20:04:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e23c3156fd314e445ed462c8730f161061b6b42dc6d01d74a6ac95c515cc6484"}
{"level":"info","ts":"2026-06-09T20:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f575c3a5fd6bf12de177b6aeb48608bf75fa888943e7a9220a7ec84978cc79c"}
{"level":"info","ts":"2026-06-09T20:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f34e23a13aee8203a92ce38884671a017682f89eeb9460bae376efb811ceee2"}
{"level":"info","ts":"2026-06-09T20:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd6c141375f96ba0f615a9e7c140b2588a47e69040cfe20a148f87cd43e85c9"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"449e4173-d13d-409f-826d-ac69e72a7497","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28412","PortSpecifier":{"PortValue":28412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"449e4173-d13d-409f-826d-ac69e72a7497","method":"DELETE","path":"/maas-api/v1/api-keys/291ef977-a07e-4ef2-ad05-7946dd3529ff","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"449e4173-d13d-409f-826d-ac69e72a7497","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28412","PortSpecifier":{"PortValue":28412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035520,"nanos":184101287},"http":{"id":"449e4173-d13d-409f-826d-ac69e72a7497","method":"DELETE","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/291ef977-a07e-4ef2-ad05-7946dd3529ff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"449e4173-d13d-409f-826d-ac69e72a7497","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"449e4173-d13d-409f-826d-ac69e72a7497","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"449e4173-d13d-409f-826d-ac69e72a7497","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"449e4173-d13d-409f-826d-ac69e72a7497","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/291ef977-a07e-4ef2-ad05-7946dd3529ff",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"449e4173-d13d-409f-826d-ac69e72a7497","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"449e4173-d13d-409f-826d-ac69e72a7497","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"449e4173-d13d-409f-826d-ac69e72a7497","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"449e4173-d13d-409f-826d-ac69e72a7497","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:30830","PortSpecifier":{"PortValue":30830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:30830","PortSpecifier":{"PortValue":30830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035520,"nanos":258231899},"http":{"id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7943e0d8-1252-4c1a-90ba-5c63bf2c9819","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34208","PortSpecifier":{"PortValue":34208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34208","PortSpecifier":{"PortValue":34208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035520,"nanos":298902329},"http":{"id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1jaqLqSe9rcGjHhK_caoZaDcSFr9e0CNb03m6TqSO5MB24KEOjFpkzHhhiVg"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1jaqLqSe9rcGjHhK_caoZaDcSFr9e0CNb03m6TqSO5MB24KEOjFpkzHhhiVg\"}"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9f90eea4-58ed-4a3f-8f36-b53af13e1b7d","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1411979d-537f-4592-b44a-ca9c7b0c6ac8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28420","PortSpecifier":{"PortValue":28420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28420","PortSpecifier":{"PortValue":28420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035520,"nanos":353674691},"http":{"id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f5610bd-2cbe-42c2-80ec-699af2c12fc5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:30834","PortSpecifier":{"PortValue":30834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:30834","PortSpecifier":{"PortValue":30834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035520,"nanos":384023459},"http":{"id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept-encoding":"identity","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x52PqCmsxKcau1nA_pgjKx91lAEnafwMJQ1skgUT4gy6gwZVkbOpMg49K81o"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x52PqCmsxKcau1nA_pgjKx91lAEnafwMJQ1skgUT4gy6gwZVkbOpMg49K81o\"}"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept-encoding":"identity","authorization":"Bearer **** sk-oai-x52PqCmsxKcau1nA_pgjKx91lAEnafwMJQ1skgUT4gy6gwZVkbOpMg49K81o","content-type":"application/json","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.2","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.24~maas-default-gateway-openshift-default-687ff6996-8fn98.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.2","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-maas-subscription":"simulator-subscription,nonexistent-fake-sub","x-request-id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289"},"host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":384023459,"seconds":1781035520},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions"},"source":{"address":"100.64.0.2:30834","port":30834}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"115937df-3abf-4e18-8a1f-0f737755815c","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2eeb4b2-1c5b-41c4-b154-27709e2f4289","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34220","PortSpecifier":{"PortValue":34220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:34220","PortSpecifier":{"PortValue":34220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035520,"nanos":410048051},"http":{"id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d2977f-93a9-4d1d-aa68-bbf5ba4acf95","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:26168","PortSpecifier":{"PortValue":26168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:26168","PortSpecifier":{"PortValue":26168}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035525,"nanos":452075621},"http":{"id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16Y5HUUJEjMwWaECG_FkF8EPqMEKipddaItnvSigYM3fPTDi3o3sdPzdISmuR"}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16Y5HUUJEjMwWaECG_FkF8EPqMEKipddaItnvSigYM3fPTDi3o3sdPzdISmuR\"}"}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234d4ae2-bc5e-4b3c-818c-3c7dda8020a8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56988","PortSpecifier":{"PortValue":56988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:56988","PortSpecifier":{"PortValue":56988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035525,"nanos":501837813},"http":{"id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba66b6b6-7eb5-4f71-95f0-80f1ef5f4f70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42668","PortSpecifier":{"PortValue":42668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42668","PortSpecifier":{"PortValue":42668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035525,"nanos":537455518},"http":{"id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","config":{"Name":"anonymous","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"ExtendedProperties":[]},"object":{"anonymous":true}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","input":{"auth":{"identity":{"anonymous":true}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","config":{"Name":"deny-unconfigured-models","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"context.request.http.method","Operator":1,"Value":"__deny_unconfigured_models__"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:05:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3bc5c242-75ca-479b-b2ff-d986bc75436b","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"error","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T19:59:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T19:59:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81cb493c-1bf9-4f36-8f14-607c741e835b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:54590","PortSpecifier":{"PortValue":54590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035532,"nanos":395291363},"http":{"id":"81cb493c-1bf9-4f36-8f14-607c741e835b","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81cb493c-1bf9-4f36-8f14-607c741e835b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:35744","PortSpecifier":{"PortValue":35744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:35744","PortSpecifier":{"PortValue":35744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035532,"nanos":428633807},"http":{"id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** DROP TABLE subscriptions; --","x-request-id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** DROP TABLE subscriptions; --","x-request-id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb"},"host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":428633807,"seconds":1781035532}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35744},"address":"100.64.0.4:35744"}}}}},"destination":{"address":"10.134.0.24:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** DROP TABLE subscriptions; --","x-request-id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb"},"host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":428633807,"seconds":1781035532},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"100.64.0.4:35744","port":35744}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b4df97-df6b-4f52-a1f3-6efd29d8c6f7","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d01c474-15db-4c0d-a3c0-c0d33499e5bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57004","PortSpecifier":{"PortValue":57004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57004","PortSpecifier":{"PortValue":57004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035532,"nanos":464793356},"http":{"id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** \"\"}","x-request-id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** \"\"}","x-request-id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c"},"host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":464793356,"seconds":1781035532}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57004},"address":"100.64.0.3:57004"}}}}},"destination":{"address":"10.134.0.24:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** \"\"}","x-request-id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c"},"host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":464793356,"seconds":1781035532},"url_path":"/llm/facebook-opt-125m-simulated/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"100.64.0.3:57004","port":57004}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b4df97-df6b-4f52-a1f3-6efd29d8c6f7","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b82686c5-67ab-4d9b-adc8-1eaee1c05a9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:18046","PortSpecifier":{"PortValue":18046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:18046","PortSpecifier":{"PortValue":18046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035532,"nanos":494980393},"http":{"id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b4df97-df6b-4f52-a1f3-6efd29d8c6f7","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed863949-bda3-4edf-9fb2-528a6fa69cfb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52638","PortSpecifier":{"PortValue":52638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:52638","PortSpecifier":{"PortValue":52638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035532,"nanos":521827571},"http":{"id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GeDDP3VpB4rbKW3b_jXDLFLeqQDj4ordDY1guDqW2S7uFj9UGH47G6efyBDW\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60b4df97-df6b-4f52-a1f3-6efd29d8c6f7","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d4a0db3-fcbf-4725-a69d-25d72dc9ef1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51540","PortSpecifier":{"PortValue":51540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51540","PortSpecifier":{"PortValue":51540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035544,"nanos":536949981},"http":{"id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88381d40-a496-4d5c-af0a-d7272a1d25c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:44506","PortSpecifier":{"PortValue":44506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:44506","PortSpecifier":{"PortValue":44506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035544,"nanos":578586685},"http":{"id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1c7a8cc-d1bc-46a0-9d22-38014a28f9e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1950797f-9d79-4571-acbf-d574414c129d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11400","PortSpecifier":{"PortValue":11400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1950797f-9d79-4571-acbf-d574414c129d","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1950797f-9d79-4571-acbf-d574414c129d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11400","PortSpecifier":{"PortValue":11400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035544,"nanos":610729296},"http":{"id":"1950797f-9d79-4571-acbf-d574414c129d","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.24~maas-default-gateway-openshift-default-687ff6996-8fn98.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"1950797f-9d79-4571-acbf-d574414c129d"},"path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1950797f-9d79-4571-acbf-d574414c129d","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1950797f-9d79-4571-acbf-d574414c129d","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce49143c-cbc7-4689-aac9-49b6e9ffc566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10470","PortSpecifier":{"PortValue":10470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce49143c-cbc7-4689-aac9-49b6e9ffc566","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce49143c-cbc7-4689-aac9-49b6e9ffc566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10470","PortSpecifier":{"PortValue":10470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035544,"nanos":627896849},"http":{"id":"ce49143c-cbc7-4689-aac9-49b6e9ffc566","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce49143c-cbc7-4689-aac9-49b6e9ffc566","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce49143c-cbc7-4689-aac9-49b6e9ffc566","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"Bearer **** realm=\"api-keys\""}]}}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:44520","PortSpecifier":{"PortValue":44520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66d304bb-2a6e-4d75-818f-f48d6138c370","method":"POST","path":"/llm/premium-simulated-simulated-premium/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:44520","PortSpecifier":{"PortValue":44520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035544,"nanos":656935353},"http":{"id":"66d304bb-2a6e-4d75-818f-f48d6138c370","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/premium-simulated-simulated-premium\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"error":"model_not_in_subscription","message":"subscription simulator-subscription does not include model llm/premium-simulated-simulated-premium","phase":"","ready":false}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","input":{"auth":{"identity":"Bearer **** simulator-subscription does not include model llm/premium-simulated-simulated-premium","phase":"","ready":false}}},"context":{"context_extensions":{"host":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"premium-user\"]\nallowed_users := [\"system:serviceaccount:premium-users-namespace:premium-service-account\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66d304bb-2a6e-4d75-818f-f48d6138c370","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":"model_not_in_subscription"},{"content-type":"text/plain"}],"body":"subscription simulator-subscription does not include model llm/premium-simulated-simulated-premium"}}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:48098","PortSpecifier":{"PortValue":48098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:48098","PortSpecifier":{"PortValue":48098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035544,"nanos":974777236},"http":{"id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2274919b-d615-48fe-ba41-ad1b79e72bbc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5142","PortSpecifier":{"PortValue":5142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19b4274a-4bbf-4c4d-82a1-416670790370","method":"DELETE","path":"/maas-api/v1/api-keys/a25ec3ab-8da9-4790-8383-eaacab9a4dad","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:5142","PortSpecifier":{"PortValue":5142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035545,"nanos":5450718},"http":{"id":"19b4274a-4bbf-4c4d-82a1-416670790370","method":"DELETE","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a25ec3ab-8da9-4790-8383-eaacab9a4dad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/a25ec3ab-8da9-4790-8383-eaacab9a4dad",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19b4274a-4bbf-4c4d-82a1-416670790370","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11406","PortSpecifier":{"PortValue":11406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:11406","PortSpecifier":{"PortValue":11406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035545,"nanos":48867502},"http":{"id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf70543f-d0bf-4f85-8c58-4141ee70f53e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51552","PortSpecifier":{"PortValue":51552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","method":"DELETE","path":"/maas-api/v1/api-keys/f0a5e82c-53b5-4322-9d65-ade942598ba4","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51552","PortSpecifier":{"PortValue":51552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035545,"nanos":76299919},"http":{"id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","method":"DELETE","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/f0a5e82c-53b5-4322-9d65-ade942598ba4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/f0a5e82c-53b5-4322-9d65-ade942598ba4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b48f3d8-c0db-466c-8022-bea1b62d8c01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10476","PortSpecifier":{"PortValue":10476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"828bb962-f291-40e9-a5d5-7c3279d9520a","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:10476","PortSpecifier":{"PortValue":10476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035545,"nanos":133942282},"http":{"id":"828bb962-f291-40e9-a5d5-7c3279d9520a","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"828bb962-f291-40e9-a5d5-7c3279d9520a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:5794","PortSpecifier":{"PortValue":5794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e00d11ce-bc83-450e-8302-e14b0d840488","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:5794","PortSpecifier":{"PortValue":5794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035545,"nanos":416470001},"http":{"id":"e00d11ce-bc83-450e-8302-e14b0d840488","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e00d11ce-bc83-450e-8302-e14b0d840488","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57884","PortSpecifier":{"PortValue":57884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","method":"POST","path":"/llm/premium-simulated-simulated-premium/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:57884","PortSpecifier":{"PortValue":57884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035545,"nanos":462046433},"http":{"id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/premium-simulated-simulated-premium\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"error":"model_not_in_subscription","message":"subscription simulator-subscription does not include model llm/premium-simulated-simulated-premium","phase":"","ready":false}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","input":{"auth":{"identity":"Bearer **** simulator-subscription does not include model llm/premium-simulated-simulated-premium","phase":"","ready":false}}},"context":{"context_extensions":{"host":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:05:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd1f6ae-7acf-440a-b453-42d3cbb4dfd9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":"model_not_in_subscription"},{"content-type":"text/plain"}],"body":"subscription simulator-subscription does not include model llm/premium-simulated-simulated-premium"}}
{"level":"debug","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37282","PortSpecifier":{"PortValue":37282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3141ec79-8798-49a8-8871-db5ae03d120c","method":"POST","path":"/llm/premium-simulated-simulated-premium/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37282","PortSpecifier":{"PortValue":37282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035553,"nanos":635161518},"http":{"id":"3141ec79-8798-49a8-8871-db5ae03d120c","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/premium-simulated-simulated-premium\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"error":"model_not_in_subscription","message":"subscription simulator-subscription does not include model llm/premium-simulated-simulated-premium","phase":"","ready":false}}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","input":{"auth":{"identity":"Bearer **** simulator-subscription does not include model llm/premium-simulated-simulated-premium","phase":"","ready":false}}},"context":{"context_extensions":{"host":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:05:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3141ec79-8798-49a8-8871-db5ae03d120c","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":"model_not_in_subscription"}],"body":"subscription simulator-subscription does not include model llm/premium-simulated-simulated-premium"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:00:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:00:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"error","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:05:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"error","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:05:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37892","PortSpecifier":{"PortValue":37892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37892","PortSpecifier":{"PortValue":37892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":256545785},"http":{"id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1508f2ed-b6b6-4478-9839-09d4c8be8a36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4100","PortSpecifier":{"PortValue":4100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d85451d-ed28-4c68-82ec-33b85edcf672","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4100","PortSpecifier":{"PortValue":4100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":295057032},"http":{"id":"1d85451d-ed28-4c68-82ec-33b85edcf672","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-rate-limit-test-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-limit-test-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2820eba3-7e13-4bd6-953e-ea11503c54fe","selected_subscription":"e2e-rate-limit-test-subscription","selected_subscription_key":"models-as-a-service/e2e-rate-limit-test-subscription@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d85451d-ed28-4c68-82ec-33b85edcf672","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:45684","PortSpecifier":{"PortValue":45684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:45684","PortSpecifier":{"PortValue":45684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":435831061},"http":{"id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-rate-limit-test-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-limit-test-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2820eba3-7e13-4bd6-953e-ea11503c54fe","selected_subscription":"e2e-rate-limit-test-subscription","selected_subscription_key":"models-as-a-service/e2e-rate-limit-test-subscription@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21d90071-81fc-4c73-8ba9-a5a709f6b453","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d085a6d-73db-436c-9126-ad9102b06303","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54428","PortSpecifier":{"PortValue":54428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d085a6d-73db-436c-9126-ad9102b06303","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d085a6d-73db-436c-9126-ad9102b06303","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:54428","PortSpecifier":{"PortValue":54428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":568771805},"http":{"id":"6d085a6d-73db-436c-9126-ad9102b06303","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-rate-limit-test-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d085a6d-73db-436c-9126-ad9102b06303","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-limit-test-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d085a6d-73db-436c-9126-ad9102b06303","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2820eba3-7e13-4bd6-953e-ea11503c54fe","selected_subscription":"e2e-rate-limit-test-subscription","selected_subscription_key":"models-as-a-service/e2e-rate-limit-test-subscription@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d085a6d-73db-436c-9126-ad9102b06303","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d085a6d-73db-436c-9126-ad9102b06303","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40563208-79e4-461f-a253-34ebe7a807d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:58122","PortSpecifier":{"PortValue":58122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40563208-79e4-461f-a253-34ebe7a807d3","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40563208-79e4-461f-a253-34ebe7a807d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:58122","PortSpecifier":{"PortValue":58122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":697178728},"http":{"id":"40563208-79e4-461f-a253-34ebe7a807d3","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-rate-limit-test-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40563208-79e4-461f-a253-34ebe7a807d3","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-limit-test-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40563208-79e4-461f-a253-34ebe7a807d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2820eba3-7e13-4bd6-953e-ea11503c54fe","selected_subscription":"e2e-rate-limit-test-subscription","selected_subscription_key":"models-as-a-service/e2e-rate-limit-test-subscription@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40563208-79e4-461f-a253-34ebe7a807d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40563208-79e4-461f-a253-34ebe7a807d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1db7d07-6da2-470e-91f6-24db82660418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4102","PortSpecifier":{"PortValue":4102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1db7d07-6da2-470e-91f6-24db82660418","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1db7d07-6da2-470e-91f6-24db82660418","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:4102","PortSpecifier":{"PortValue":4102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":827281183},"http":{"id":"c1db7d07-6da2-470e-91f6-24db82660418","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-rate-limit-test-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1db7d07-6da2-470e-91f6-24db82660418","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-limit-test-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1db7d07-6da2-470e-91f6-24db82660418","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2820eba3-7e13-4bd6-953e-ea11503c54fe","selected_subscription":"e2e-rate-limit-test-subscription","selected_subscription_key":"models-as-a-service/e2e-rate-limit-test-subscription@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1db7d07-6da2-470e-91f6-24db82660418","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1db7d07-6da2-470e-91f6-24db82660418","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:1890","PortSpecifier":{"PortValue":1890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:1890","PortSpecifier":{"PortValue":1890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035578,"nanos":953526930},"http":{"id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEQuqrwnY608eUCt_5u2d1Jr1grCFomhQTWUPJICqfcQZGnTQ3tumMj1ypGo\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-unconfigured-facebook-opt-125m-simulated\",\"requestedSubscription\":\"e2e-rate-limit-test-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","input":{"auth":{"identity":"Bearer **** with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-limit-test-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2820eba3-7e13-4bd6-953e-ea11503c54fe","selected_subscription":"e2e-rate-limit-test-subscription","selected_subscription_key":"models-as-a-service/e2e-rate-limit-test-subscription@llm/e2e-unconfigured-facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"MaaSModelRef with no auth policy or subscription — used to validate default-deny","display_name":"Unconfigured OPT 125M (E2E)","name":"e2e-unconfigured-facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":10,"window":"1m"}]}],"name":"e2e-rate-limit-test-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfe2163e-1eb9-4ddf-8d63-f27c92ef5003","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51826","PortSpecifier":{"PortValue":51826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f598f747-1e4f-48d2-b598-39c722c548a4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:51826","PortSpecifier":{"PortValue":51826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035604,"nanos":41446924},"http":{"id":"f598f747-1e4f-48d2-b598-39c722c548a4","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f598f747-1e4f-48d2-b598-39c722c548a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"}
{"level":"error","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:06:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"}
{"level":"debug","ts":"2026-06-09T20:06:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:22076","PortSpecifier":{"PortValue":22076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:22076","PortSpecifier":{"PortValue":22076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035612,"nanos":712913313},"http":{"id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5552c01-9087-4ec2-b6af-adeedcffa1d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24858","PortSpecifier":{"PortValue":24858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f113a58d-be00-4122-af04-dd3a1c383e99","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:24858","PortSpecifier":{"PortValue":24858}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035614,"nanos":743703998},"http":{"id":"f113a58d-be00-4122-af04-dd3a1c383e99","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f113a58d-be00-4122-af04-dd3a1c383e99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035616,"nanos":778337260},"http":{"id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e55065b-f3ca-44f7-88c2-3068f398e58e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19056","PortSpecifier":{"PortValue":19056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:19056","PortSpecifier":{"PortValue":19056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035618,"nanos":812026326},"http":{"id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:06:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af86d0f0-f3bd-42b6-99c6-08f2d98fa960","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46d84639-1bb8-4ded-a665-886075930416","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:22610","PortSpecifier":{"PortValue":22610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46d84639-1bb8-4ded-a665-886075930416","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46d84639-1bb8-4ded-a665-886075930416","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:22610","PortSpecifier":{"PortValue":22610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035620,"nanos":843826549},"http":{"id":"46d84639-1bb8-4ded-a665-886075930416","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46d84639-1bb8-4ded-a665-886075930416","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46d84639-1bb8-4ded-a665-886075930416","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46d84639-1bb8-4ded-a665-886075930416","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46d84639-1bb8-4ded-a665-886075930416","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46d84639-1bb8-4ded-a665-886075930416","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46d84639-1bb8-4ded-a665-886075930416","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:3582","PortSpecifier":{"PortValue":3582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:3582","PortSpecifier":{"PortValue":3582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035622,"nanos":879017485},"http":{"id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecb2ec6d-2599-4765-8cc8-6b54ced23587","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39782","PortSpecifier":{"PortValue":39782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60255513-ae6f-47cd-81cb-820cd5e37022","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39782","PortSpecifier":{"PortValue":39782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035624,"nanos":916437477},"http":{"id":"60255513-ae6f-47cd-81cb-820cd5e37022","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60255513-ae6f-47cd-81cb-820cd5e37022","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:15276","PortSpecifier":{"PortValue":15276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:15276","PortSpecifier":{"PortValue":15276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035626,"nanos":949600781},"http":{"id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"573fd738-d2ef-4772-93d6-c9b94f52a4d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82dda615-c94b-45d2-b059-6814c52b246b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:16396","PortSpecifier":{"PortValue":16396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82dda615-c94b-45d2-b059-6814c52b246b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82dda615-c94b-45d2-b059-6814c52b246b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:16396","PortSpecifier":{"PortValue":16396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035628,"nanos":979161588},"http":{"id":"82dda615-c94b-45d2-b059-6814c52b246b","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82dda615-c94b-45d2-b059-6814c52b246b","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dda615-c94b-45d2-b059-6814c52b246b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82dda615-c94b-45d2-b059-6814c52b246b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82dda615-c94b-45d2-b059-6814c52b246b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7274","PortSpecifier":{"PortValue":7274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f197b383-bc10-4630-abc1-f1453cc695ea","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:7274","PortSpecifier":{"PortValue":7274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035631,"nanos":9668023},"http":{"id":"f197b383-bc10-4630-abc1-f1453cc695ea","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f197b383-bc10-4630-abc1-f1453cc695ea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28368","PortSpecifier":{"PortValue":28368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e9791f4-4185-4d53-9647-54c2967f4341","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28368","PortSpecifier":{"PortValue":28368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035633,"nanos":43564363},"http":{"id":"4e9791f4-4185-4d53-9647-54c2967f4341","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e9791f4-4185-4d53-9647-54c2967f4341","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:39678","PortSpecifier":{"PortValue":39678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035635,"nanos":75953737},"http":{"id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1e8f021-ce7b-4577-8174-6934f0b82b17","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:16412","PortSpecifier":{"PortValue":16412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcc9a526-3733-461b-878d-23ee709abf9b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:16412","PortSpecifier":{"PortValue":16412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035637,"nanos":107087562},"http":{"id":"dcc9a526-3733-461b-878d-23ee709abf9b","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcc9a526-3733-461b-878d-23ee709abf9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:30286","PortSpecifier":{"PortValue":30286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b21b2af-d284-4bd9-8564-274a91d55ede","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:30286","PortSpecifier":{"PortValue":30286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035639,"nanos":137596175},"http":{"id":"7b21b2af-d284-4bd9-8564-274a91d55ede","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b21b2af-d284-4bd9-8564-274a91d55ede","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60898","PortSpecifier":{"PortValue":60898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:60898","PortSpecifier":{"PortValue":60898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035641,"nanos":167818746},"http":{"id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b013a276-6d95-4e4e-b0ef-783ad96bcddc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4412","PortSpecifier":{"PortValue":4412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"977ee42f-2e01-40d3-8457-a1be0e98d192","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:4412","PortSpecifier":{"PortValue":4412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035643,"nanos":200683032},"http":{"id":"977ee42f-2e01-40d3-8457-a1be0e98d192","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"977ee42f-2e01-40d3-8457-a1be0e98d192","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12490","PortSpecifier":{"PortValue":12490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:12490","PortSpecifier":{"PortValue":12490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035645,"nanos":247703620},"http":{"id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b5b4d9b-8c12-46d0-b18b-cea35e5c9d01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47090","PortSpecifier":{"PortValue":47090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"561f558c-fcb7-416f-b1f4-aad603b9a823","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:47090","PortSpecifier":{"PortValue":47090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035647,"nanos":281966295},"http":{"id":"561f558c-fcb7-416f-b1f4-aad603b9a823","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"561f558c-fcb7-416f-b1f4-aad603b9a823","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"694b053f-cd7e-4279-81ac-634236f692c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3144","PortSpecifier":{"PortValue":3144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"694b053f-cd7e-4279-81ac-634236f692c3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"694b053f-cd7e-4279-81ac-634236f692c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:3144","PortSpecifier":{"PortValue":3144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035649,"nanos":315135184},"http":{"id":"694b053f-cd7e-4279-81ac-634236f692c3","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"694b053f-cd7e-4279-81ac-634236f692c3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"694b053f-cd7e-4279-81ac-634236f692c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"694b053f-cd7e-4279-81ac-634236f692c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"694b053f-cd7e-4279-81ac-634236f692c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41412845-8673-4e69-8e26-b9724c290667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42132","PortSpecifier":{"PortValue":42132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41412845-8673-4e69-8e26-b9724c290667","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41412845-8673-4e69-8e26-b9724c290667","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:42132","PortSpecifier":{"PortValue":42132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035651,"nanos":349663090},"http":{"id":"41412845-8673-4e69-8e26-b9724c290667","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41412845-8673-4e69-8e26-b9724c290667","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41412845-8673-4e69-8e26-b9724c290667","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41412845-8673-4e69-8e26-b9724c290667","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41412845-8673-4e69-8e26-b9724c290667","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41412845-8673-4e69-8e26-b9724c290667","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41412845-8673-4e69-8e26-b9724c290667","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00a1e291-1f25-4804-bd29-63cd32935100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:33252","PortSpecifier":{"PortValue":33252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00a1e291-1f25-4804-bd29-63cd32935100","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00a1e291-1f25-4804-bd29-63cd32935100","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:33252","PortSpecifier":{"PortValue":33252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035653,"nanos":379991961},"http":{"id":"00a1e291-1f25-4804-bd29-63cd32935100","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00a1e291-1f25-4804-bd29-63cd32935100","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a1e291-1f25-4804-bd29-63cd32935100","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00a1e291-1f25-4804-bd29-63cd32935100","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00a1e291-1f25-4804-bd29-63cd32935100","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24738","PortSpecifier":{"PortValue":24738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:24738","PortSpecifier":{"PortValue":24738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035655,"nanos":412641853},"http":{"id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c46455ea-bc3e-42ca-a9c4-9630b49738c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38740","PortSpecifier":{"PortValue":38740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:38740","PortSpecifier":{"PortValue":38740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035657,"nanos":444823931},"http":{"id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc19e8a8-b9d4-4495-86bf-0cbfae52709b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T20:07:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"info","ts":"2026-06-09T20:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:62660","PortSpecifier":{"PortValue":62660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ede8aa97-2461-4b38-9e36-9db62e172113","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:62660","PortSpecifier":{"PortValue":62660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035673,"nanos":984480665},"http":{"id":"ede8aa97-2461-4b38-9e36-9db62e172113","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ede8aa97-2461-4b38-9e36-9db62e172113","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37664","PortSpecifier":{"PortValue":37664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","method":"POST","path":"/llm/premium-simulated-simulated-premium/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:37664","PortSpecifier":{"PortValue":37664}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035674,"nanos":35923532},"http":{"id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GGAdLvNFGusZrcms_Nrgc6lnFW3pwM8E9ZrhonRrjUDlfauve1ILO9hKGCQc"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GGAdLvNFGusZrcms_Nrgc6lnFW3pwM8E9ZrhonRrjUDlfauve1ILO9hKGCQc\"}"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/premium-simulated-simulated-premium\",\"requestedSubscription\":\"e2e-premium-sa-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"description":"A simulated model for premium-tier testing","display_name":"Premium Simulator","name":"premium-simulated-simulated-premium","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-premium-sa-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","input":{"auth":{"identity":"Bearer **** simulated model for premium-tier testing","display_name":"Premium Simulator","name":"premium-simulated-simulated-premium","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-premium-sa-sub","namespace":"models-as-a-service","phase":"Active","ready":true}}},"context":{"context_extensions":{"host":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/premium-simulated-simulated-premium/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"premium-user\",\"system:authenticated\"]\nallowed_users := [\"system:serviceaccount:premium-users-namespace:premium-service-account\"]\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-premium-sa-sub"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e1032555-d225-4208-a352-646be2ee82ab","selected_subscription":"e2e-premium-sa-sub","selected_subscription_key":"models-as-a-service/e2e-premium-sa-sub@llm/premium-simulated-simulated-premium","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"description":"A simulated model for premium-tier testing","display_name":"Premium Simulator","name":"premium-simulated-simulated-premium","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-premium-sa-sub","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ec4cb6f-a121-4a56-a5ff-d7d5148e3bb8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"}
{"level":"debug","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:07:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:07:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"info","ts":"2026-06-09T20:07:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"}
{"level":"debug","ts":"2026-06-09T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"}
{"level":"debug","ts":"2026-06-09T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:04:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:08:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:08:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41348","PortSpecifier":{"PortValue":41348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:41348","PortSpecifier":{"PortValue":41348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035698,"nanos":912585635},"http":{"id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:08:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d385ef7a-0a1c-4e27-8835-a2c08e9ea312","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:6478","PortSpecifier":{"PortValue":6478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:6478","PortSpecifier":{"PortValue":6478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035715,"nanos":470034902},"http":{"id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:08:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bad08fc7-e7dc-4d7c-a5fc-495f68346eee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:31242","PortSpecifier":{"PortValue":31242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:31242","PortSpecifier":{"PortValue":31242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035732,"nanos":295980239},"http":{"id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3914c426-408c-4c63-8dd9-e467a3931795","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:08:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ef17c03-1a69-4baa-9909-5aeca5b77c8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:14500","PortSpecifier":{"PortValue":14500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:14500","PortSpecifier":{"PortValue":14500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035749,"nanos":291235813},"http":{"id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B"}
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GhPV5Zz25fy5l1kH_5TzyVV6oF2tSbgyuAh8sjPtBYiAmROKvPL9vJfxKY5B\"}"}
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","config":"subscription-info","method":"POST","url":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"error":"not_found","message":"requested subscription not found","phase":"","ready":false}}
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","input":{"auth":{"identity":"Bearer **** subscription not found","phase":"","ready":false}}},"context":{"context_extensions":{"host":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:09:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cbaaeed8-cd74-4b29-ac86-2e3dc2e00be6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":"not_found"},{"content-type":"text/plain"}],"body":"requested subscription not found"}}
{"level":"info","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32064","PortSpecifier":{"PortValue":32064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","method":"POST","path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:32064","PortSpecifier":{"PortValue":32064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035757,"nanos":898611960},"http":{"id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","config":{"Name":"anonymous","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"ExtendedProperties":[]},"object":{"anonymous":true}}
{"level":"debug","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","input":{"auth":{"identity":{"anonymous":true}},"context":{"context_extensions":{"host":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-unconfigured-facebook-opt-125m-simulated/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","config":{"Name":"deny-unconfigured-models","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"context.request.http.method","Operator":1,"Value":"__deny_unconfigured_models__"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-06-09T20:09:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"935751b4-9824-4ec4-b4fd-fb7570aa3e15","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"message":"Unauthorized"}}
{"level":"info","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:9758","PortSpecifier":{"PortValue":9758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:9758","PortSpecifier":{"PortValue":9758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035766,"nanos":163576379},"http":{"id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=83539742-5cb0-4644-9bca-1d0fb182c31e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6cca34df-4ae9-47fa-a0e3-8f91af993ef7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:09:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfd0bed7-cfab-4ce8-a705-c3c7873891ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"error","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"error","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:09:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:09:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7490","PortSpecifier":{"PortValue":7490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:7490","PortSpecifier":{"PortValue":7490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.24:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1781035814,"nanos":382700649},"http":{"id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","method":"POST","headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:models-as-a-service:e2e-sa-success","uid":"e3dde475-280f-4b83-98e5-0a2d27e67a29","groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1f0f91c-17bf-4533-9aa2-9ce386a99599"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"]}}
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7691b05935e1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d1f0f91c-17bf-4533-9aa2-9ce386a99599"]},"groups":["system:serviceaccounts","system:serviceaccounts:models-as-a-service","system:authenticated"],"uid":"e3dde475-280f-4b83-98e5-0a2d27e67a29","username":"system:serviceaccount:models-as-a-service:e2e-sa-success"}}},"context":{"context_extensions":{"host":"4b78668c68e506f3e4245c5d1f1af6820d0987e90bac1b37e2a03d21cc7ed38d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.24:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5f9e0e9f-46b6-4b4b-9b16-7691b05935e1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:models-as-a-service:e2e-sa-success"}
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:models-as-a-service\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:10:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8dfd8cf7-4704-495c-9ae7-603159cb7f05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"error","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"debug","ts":"2026-06-09T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"error","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T20:10:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"}
{"level":"error","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T20:10:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}}