{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":3,"numResponseItems":3,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:27006","PortSpecifier":{"PortValue":27006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:27006","PortSpecifier":{"PortValue":27006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780969985,"nanos":861176019},"http":{"id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"43adccad-8a46-4d2c-b114-e2bda818ac2f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=54731bf6-3cd3-4125-982d-4394edafe0f9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb7055fd75a"]}}
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/5cb7055fd75a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=54731bf6-3cd3-4125-982d-4394edafe0f9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"43adccad-8a46-4d2c-b114-e2bda818ac2f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:53:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce2a5dee-ff84-4cc0-9d95-93f3cfe0fc26","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea3190a2-69ee-4f2f-a181-68c1e2f1f41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:3646","PortSpecifier":{"PortValue":3646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea3190a2-69ee-4f2f-a181-68c1e2f1f41e","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea3190a2-69ee-4f2f-a181-68c1e2f1f41e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:3646","PortSpecifier":{"PortValue":3646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780969986,"nanos":240529807},"http":{"id":"ea3190a2-69ee-4f2f-a181-68c1e2f1f41e","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"info","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea3190a2-69ee-4f2f-a181-68c1e2f1f41e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea3190a2-69ee-4f2f-a181-68c1e2f1f41e","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75ee0a1-67f0-458d-95cd-726d3761f247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:62488","PortSpecifier":{"PortValue":62488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a75ee0a1-67f0-458d-95cd-726d3761f247","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75ee0a1-67f0-458d-95cd-726d3761f247","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:62488","PortSpecifier":{"PortValue":62488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780969986,"nanos":267391740},"http":{"id":"a75ee0a1-67f0-458d-95cd-726d3761f247","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"83","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"httpbin.org:443/*","x-envoy-external-address":"100.64.0.4","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"a75ee0a1-67f0-458d-95cd-726d3761f247"},"path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75ee0a1-67f0-458d-95cd-726d3761f247","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required"}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75ee0a1-67f0-458d-95cd-726d3761f247","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"status":401,"message":"Authentication required","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer ****
{"level":"info","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:40968","PortSpecifier":{"PortValue":40968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","method":"POST","path":"/llm/e2e-external-model/v1/chat/completions","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:40968","PortSpecifier":{"PortValue":40968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780969986,"nanos":292848265},"http":{"id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/e2e-external-model/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WB7K2LJBXqMGccPN_U5km0Sjj40M29vkn3fSAWhXMxrkaMAaGlmB7GQ0dbR"}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1WB7K2LJBXqMGccPN_U5km0Sjj40M29vkn3fSAWhXMxrkaMAaGlmB7GQ0dbR\"}"}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/e2e-external-model\",\"requestedSubscription\":\"e2e-external-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"e2e-external-model","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-external-subscription"}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d511a955-9516-42cb-a6a4-55edd1a1e039","selected_subscription":"e2e-external-subscription","selected_subscription_key":"models-as-a-service/e2e-external-subscription@llm/e2e-external-model","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"e2e-external-model","token_rate_limits":[{"limit":10000,"window":"1h"}]}],"name":"e2e-external-subscription","namespace":"models-as-a-service","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:53:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27d01ded-dfcf-42d7-bed6-94063f8e8e08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"error","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-09T01:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc352d5e387b2430c796ef533893aa1a2ae117af03b4d40dccaf57df32193ae"}
{"level":"info","ts":"2026-06-09T01:53:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaea927e1e37c0ebeb2c3974ee40df4c6800e3e311c62d17c070273cdcfebaeb"}
{"level":"debug","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T01:53:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"error","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"],"numHostsReady":"1/1","numIdentitySources":0,"numMetadataSources":0,"numAuthorizationPolicies":1,"numResponseItems":0,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T01:53:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3efb8e937aa19b5e0bdd0c3eb5b4ece33299385dcfc89205b8934853facbdcf0"}
{"level":"info","ts":"2026-06-09T01:53:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200947db0f3acc41dd3fca21efa06f90c57afddd36d719bdda2dc74a0bd0a11"}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38"}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38"}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38"}
{"level":"error","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066"}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066"}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066"}
{"level":"error","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e386bd325e9f18521afc1e794abfe8d6715ef182dc0efd770a8cb16b2e9f066"}
{"level":"info","ts":"2026-06-09T01:53:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c47f4d07a1a9df0ca5e9fbd3684ae0faf5378adf154880fb3398d34313388f38"}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"}
{"level":"error","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"}
{"level":"error","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-09T01:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":1,"numAuthorizationPolicies":1,"numResponseItems":5,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"error","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-06-09T01:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-06-09T01:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3716b73c783a0a2a19b0b5506feb5dc0feeb890418b463ee4908d2a540490df8"}
{"level":"info","ts":"2026-06-09T01:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90d8fd7c1d73f983ea0f402e5bb196a3b4c351d30ed94437dcec591583921d33"}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25496","PortSpecifier":{"PortValue":25496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25496","PortSpecifier":{"PortValue":25496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970052,"nanos":365653473},"http":{"id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970352,"groups":["Engineering","Project-Alpha"],"iat":1780970052,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6284d3b8-a9b6-af38-3ba5-3e8933f270c9","preferred_username":"alice_lead","scope":"profile email","sid":"X7osfzcGBIzTH6iUPf65XGcG","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970352,"groups":["Engineering","Project-Alpha"],"iat":1780970052,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6284d3b8-a9b6-af38-3ba5-3e8933f270c9","preferred_username":"alice_lead","scope":"profile email","sid":"X7osfzcGBIzTH6iUPf65XGcG","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9eb57cf2-c700-4578-8886-f826d0e4f6c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64856","PortSpecifier":{"PortValue":64856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64856","PortSpecifier":{"PortValue":64856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970052,"nanos":466954937},"http":{"id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69aac209-30a3-4bbb-8c5c-04ec82af213c","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25402193-1c57-4d4a-b14d-b7c96c953835","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39602","PortSpecifier":{"PortValue":39602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25402193-1c57-4d4a-b14d-b7c96c953835","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25402193-1c57-4d4a-b14d-b7c96c953835","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:39602","PortSpecifier":{"PortValue":39602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970052,"nanos":530400119},"http":{"id":"25402193-1c57-4d4a-b14d-b7c96c953835","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer","content-length":"35","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.4","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LXY4cHA4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.4","x-forwarded-proto":"https","x-request-id":"25402193-1c57-4d4a-b14d-b7c96c953835"},"path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"25402193-1c57-4d4a-b14d-b7c96c953835","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"credential not found"}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25402193-1c57-4d4a-b14d-b7c96c953835","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}"}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25402193-1c57-4d4a-b14d-b7c96c953835","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"openshift-identities\":\"credential not found\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"017bf874-0263-4fa5-97e7-28bb823f8e55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28600","PortSpecifier":{"PortValue":28600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"017bf874-0263-4fa5-97e7-28bb823f8e55","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"017bf874-0263-4fa5-97e7-28bb823f8e55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28600","PortSpecifier":{"PortValue":28600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970052,"nanos":553306604},"http":{"id":"017bf874-0263-4fa5-97e7-28bb823f8e55","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","content-length":"36","content-type":"application/json","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"100.64.0.3","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"100.64.0.3","x-forwarded-proto":"https","x-request-id":"017bf874-0263-4fa5-97e7-28bb823f8e55"},"path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https","protocol":"HTTP/1.1"}},"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"metadata_context":{}}}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"017bf874-0263-4fa5-97e7-28bb823f8e55","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}"}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"017bf874-0263-4fa5-97e7-28bb823f8e55","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25506","PortSpecifier":{"PortValue":25506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25506","PortSpecifier":{"PortValue":25506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970052,"nanos":883325574},"http":{"id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970352,"groups":["Site-Reliability"],"iat":1780970052,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:1450dee9-76e4-c91d-0a14-6daa33a1ab7a","preferred_username":"bob_sre","scope":"profile email","sid":"7wQ8evhCjXRVR_fpzBJL_jmU","sub":"c33a5433-7067-4525-b1e4-9ac9c14abe6f","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970352,"groups":["Site-Reliability"],"iat":1780970052,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:1450dee9-76e4-c91d-0a14-6daa33a1ab7a","preferred_username":"bob_sre","scope":"profile email","sid":"7wQ8evhCjXRVR_fpzBJL_jmU","sub":"c33a5433-7067-4525-b1e4-9ac9c14abe6f","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"info","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22b533cc-81e7-407f-ae2f-3e24aaa2ee7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64870","PortSpecifier":{"PortValue":64870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64870","PortSpecifier":{"PortValue":64870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970053,"nanos":85058204},"http":{"id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970353,"groups":["Engineering","Project-Alpha"],"iat":1780970053,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:59e6e949-f622-5488-3444-7b405519bf47","preferred_username":"alice_lead","scope":"profile email","sid":"6Ju1REa7vPRL8i459jxRTEp6","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970353,"groups":["Engineering","Project-Alpha"],"iat":1780970053,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:59e6e949-f622-5488-3444-7b405519bf47","preferred_username":"alice_lead","scope":"profile email","sid":"6Ju1REa7vPRL8i459jxRTEp6","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab0a057f-4da4-4875-a7dc-51b0618b9fa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28616","PortSpecifier":{"PortValue":28616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28616","PortSpecifier":{"PortValue":28616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970053,"nanos":112292043},"http":{"id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e94fa814-556e-4a76-9e97-5bf02ca733b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970053,"nanos":127236714},"http":{"id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.57","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.57","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"32b03c5f-b7bb-4789-9b42-4ca79d849803"},"host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":127236714,"seconds":1780970053},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.57:44204","port":44204}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"75146a90-c88b-4397-82df-7131f977d221","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32b03c5f-b7bb-4789-9b42-4ca79d849803","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25512","PortSpecifier":{"PortValue":25512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06ba3777-e679-417f-9441-6b4a962d5e46","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25512","PortSpecifier":{"PortValue":25512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970053,"nanos":153976781},"http":{"id":"06ba3777-e679-417f-9441-6b4a962d5e46","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dHYBxZNigfKd4nxe_FSIo16dP2rQtdRosF2uo6u6RYcUHoSyaG1CpmVHoBaQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"75146a90-c88b-4397-82df-7131f977d221","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06ba3777-e679-417f-9441-6b4a962d5e46","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4708e381-1951-4d29-934b-686a5b7707be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64882","PortSpecifier":{"PortValue":64882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4708e381-1951-4d29-934b-686a5b7707be","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4708e381-1951-4d29-934b-686a5b7707be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64882","PortSpecifier":{"PortValue":64882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970053,"nanos":248689487},"http":{"id":"4708e381-1951-4d29-934b-686a5b7707be","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4708e381-1951-4d29-934b-686a5b7707be","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970353,"groups":["Engineering","Project-Alpha"],"iat":1780970053,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6391ed31-a96d-dc72-c7b1-62e52be62e6c","preferred_username":"alice_lead","scope":"profile email","sid":"Ied3QXzWMQTp8cQX3Eqlx9it","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4708e381-1951-4d29-934b-686a5b7707be","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970353,"groups":["Engineering","Project-Alpha"],"iat":1780970053,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6391ed31-a96d-dc72-c7b1-62e52be62e6c","preferred_username":"alice_lead","scope":"profile email","sid":"Ied3QXzWMQTp8cQX3Eqlx9it","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4708e381-1951-4d29-934b-686a5b7707be","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4708e381-1951-4d29-934b-686a5b7707be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4708e381-1951-4d29-934b-686a5b7707be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4708e381-1951-4d29-934b-686a5b7707be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4708e381-1951-4d29-934b-686a5b7707be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28620","PortSpecifier":{"PortValue":28620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","method":"DELETE","path":"/maas-api/v1/api-keys/e2d00082-73f3-4b8b-a079-926862efa17e","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28620","PortSpecifier":{"PortValue":28620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970053,"nanos":270514613},"http":{"id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","method":"DELETE","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2d00082-73f3-4b8b-a079-926862efa17e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970353,"groups":["Engineering","Project-Alpha"],"iat":1780970053,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6391ed31-a96d-dc72-c7b1-62e52be62e6c","preferred_username":"alice_lead","scope":"profile email","sid":"Ied3QXzWMQTp8cQX3Eqlx9it","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970353,"groups":["Engineering","Project-Alpha"],"iat":1780970053,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:6391ed31-a96d-dc72-c7b1-62e52be62e6c","preferred_username":"alice_lead","scope":"profile email","sid":"Ied3QXzWMQTp8cQX3Eqlx9it","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/e2d00082-73f3-4b8b-a079-926862efa17e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f63fe41f-f725-42fa-9d47-8276c4e7ec92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"931e137c-379d-46f0-9ec6-c99751028866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25516","PortSpecifier":{"PortValue":25516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"931e137c-379d-46f0-9ec6-c99751028866","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"931e137c-379d-46f0-9ec6-c99751028866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25516","PortSpecifier":{"PortValue":25516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":300969242},"http":{"id":"931e137c-379d-46f0-9ec6-c99751028866","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"931e137c-379d-46f0-9ec6-c99751028866","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LRzyH2ERO49JY3OI_hUipW3abr6Johw9pM2nNv7Yf69VydMy4UInubTiuCw3"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"931e137c-379d-46f0-9ec6-c99751028866","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LRzyH2ERO49JY3OI_hUipW3abr6Johw9pM2nNv7Yf69VydMy4UInubTiuCw3\"}"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"931e137c-379d-46f0-9ec6-c99751028866","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** revoked or expired","valid":false}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"931e137c-379d-46f0-9ec6-c99751028866","input":{"auth":{"identity":"Bearer **** revoked or expired","valid":false}}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"931e137c-379d-46f0-9ec6-c99751028866","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: username"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"931e137c-379d-46f0-9ec6-c99751028866","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"reason":"no such key: groups"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"931e137c-379d-46f0-9ec6-c99751028866","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"931e137c-379d-46f0-9ec6-c99751028866","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58044","PortSpecifier":{"PortValue":58044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58044","PortSpecifier":{"PortValue":58044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":440355277},"http":{"id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"failed to verify signature: failed to verify id token signature"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"cannot validate identity","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"reason":"not authenticated"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9532de5-1a9f-45f2-b47a-9703b5cf9c0f","authorized":false,"response":"UNAUTHENTICATED","object":{"code":16,"message":"{\"oidc-identities\":\"failed to verify signature: failed to verify id token signature\",\"openshift-identities\":\"not authenticated\"}","headers":[{"WWW-Authenticate":"request.headers.authorization realm=\"api-keys\""},{"WWW-Authenticate":"Bearer **** realm=\"openshift-identities\""}]}}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64894","PortSpecifier":{"PortValue":64894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d1352d9-0133-4560-bebe-c251f82324d1","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64894","PortSpecifier":{"PortValue":64894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":608523602},"http":{"id":"9d1352d9-0133-4560-bebe-c251f82324d1","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d77e9282-8bbd-a375-f91c-cec1f4cb8832","preferred_username":"alice_lead","scope":"profile email","sid":"1whlkB_rotSOkp90ya1sIB96","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:d77e9282-8bbd-a375-f91c-cec1f4cb8832","preferred_username":"alice_lead","scope":"profile email","sid":"1whlkB_rotSOkp90ya1sIB96","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d1352d9-0133-4560-bebe-c251f82324d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51718","PortSpecifier":{"PortValue":51718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51718","PortSpecifier":{"PortValue":51718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":632558952},"http":{"id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Site-Reliability"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:88392d18-d2f4-62cf-cf8b-5e1c224943f2","preferred_username":"bob_sre","scope":"profile email","sid":"Mf8rZo87FaePPmCgFTQSfqZw","sub":"c33a5433-7067-4525-b1e4-9ac9c14abe6f","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Site-Reliability"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:88392d18-d2f4-62cf-cf8b-5e1c224943f2","preferred_username":"bob_sre","scope":"profile email","sid":"Mf8rZo87FaePPmCgFTQSfqZw","sub":"c33a5433-7067-4525-b1e4-9ac9c14abe6f","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Site-Reliability\"]"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"bob_sre"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4befbe6-ba58-4ba4-bbcd-b8da88f9ead3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20394","PortSpecifier":{"PortValue":20394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59aef2fb-59f3-49c8-95a3-22836f13045d","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20394","PortSpecifier":{"PortValue":20394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":725586507},"http":{"id":"59aef2fb-59f3-49c8-95a3-22836f13045d","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:933a5740-0200-3009-7a39-6566934efec3","preferred_username":"alice_lead","scope":"profile email","sid":"tlNrQ6JBktTTzqWJ_3vVe9Tb","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:933a5740-0200-3009-7a39-6566934efec3","preferred_username":"alice_lead","scope":"profile email","sid":"tlNrQ6JBktTTzqWJ_3vVe9Tb","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59aef2fb-59f3-49c8-95a3-22836f13045d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58058","PortSpecifier":{"PortValue":58058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2500026b-48ed-4253-ac50-1cb8e8095af6","method":"DELETE","path":"/maas-api/v1/api-keys/67ac1630-8f4d-4925-ae03-63da69d4ab8d","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58058","PortSpecifier":{"PortValue":58058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":749583687},"http":{"id":"2500026b-48ed-4253-ac50-1cb8e8095af6","method":"DELETE","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/67ac1630-8f4d-4925-ae03-63da69d4ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:933a5740-0200-3009-7a39-6566934efec3","preferred_username":"alice_lead","scope":"profile email","sid":"tlNrQ6JBktTTzqWJ_3vVe9Tb","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:933a5740-0200-3009-7a39-6566934efec3","preferred_username":"alice_lead","scope":"profile email","sid":"tlNrQ6JBktTTzqWJ_3vVe9Tb","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/67ac1630-8f4d-4925-ae03-63da69d4ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2500026b-48ed-4253-ac50-1cb8e8095af6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a221c398-b402-4a2f-a705-7d887610eaae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28630","PortSpecifier":{"PortValue":28630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a221c398-b402-4a2f-a705-7d887610eaae","method":"DELETE","path":"/maas-api/v1/api-keys/67ac1630-8f4d-4925-ae03-63da69d4ab8d","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a221c398-b402-4a2f-a705-7d887610eaae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28630","PortSpecifier":{"PortValue":28630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":777144188},"http":{"id":"a221c398-b402-4a2f-a705-7d887610eaae","method":"DELETE","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/67ac1630-8f4d-4925-ae03-63da69d4ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a221c398-b402-4a2f-a705-7d887610eaae","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:933a5740-0200-3009-7a39-6566934efec3","preferred_username":"alice_lead","scope":"profile email","sid":"tlNrQ6JBktTTzqWJ_3vVe9Tb","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a221c398-b402-4a2f-a705-7d887610eaae","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:933a5740-0200-3009-7a39-6566934efec3","preferred_username":"alice_lead","scope":"profile email","sid":"tlNrQ6JBktTTzqWJ_3vVe9Tb","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"DELETE",":path":"/maas-api/v1/api-keys/67ac1630-8f4d-4925-ae03-63da69d4ab8d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a221c398-b402-4a2f-a705-7d887610eaae","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a221c398-b402-4a2f-a705-7d887610eaae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a221c398-b402-4a2f-a705-7d887610eaae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a221c398-b402-4a2f-a705-7d887610eaae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a221c398-b402-4a2f-a705-7d887610eaae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51728","PortSpecifier":{"PortValue":51728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"033f61ca-b94b-4161-9023-b2f05204acd7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51728","PortSpecifier":{"PortValue":51728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":871618881},"http":{"id":"033f61ca-b94b-4161-9023-b2f05204acd7","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:992a55dd-1481-3448-8f33-3e76f6773870","preferred_username":"alice_lead","scope":"profile email","sid":"onPPrZ3Vtq5YG5bVKFvyz9Lw","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:992a55dd-1481-3448-8f33-3e76f6773870","preferred_username":"alice_lead","scope":"profile email","sid":"onPPrZ3Vtq5YG5bVKFvyz9Lw","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"033f61ca-b94b-4161-9023-b2f05204acd7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25528","PortSpecifier":{"PortValue":25528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2540f88-ed60-4912-9a36-a5a9816b728c","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25528","PortSpecifier":{"PortValue":25528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":895360436},"http":{"id":"f2540f88-ed60-4912-9a36-a5a9816b728c","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RCA40y0fcOPiGjoQ_lDy3zdrWtlGt6x60GtbsRZKYCutXzqBSbMo0IeF9fI4"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RCA40y0fcOPiGjoQ_lDy3zdrWtlGt6x60GtbsRZKYCutXzqBSbMo0IeF9fI4\"}"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2540f88-ed60-4912-9a36-a5a9816b728c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":900368003},"http":{"id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RCA40y0fcOPiGjoQ_lDy3zdrWtlGt6x60GtbsRZKYCutXzqBSbMo0IeF9fI4"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RCA40y0fcOPiGjoQ_lDy3zdrWtlGt6x60GtbsRZKYCutXzqBSbMo0IeF9fI4\"}"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1RCA40y0fcOPiGjoQ_lDy3zdrWtlGt6x60GtbsRZKYCutXzqBSbMo0IeF9fI4","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.57","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC04NTU5Y2Q1NzQ0LXY4cHA4CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.57","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"6a7557d7-df6d-4834-90ce-ce980bcfd651"},"host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":900368003,"seconds":1780970056},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.57:44204","port":44204}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"93bcb988-df54-4048-b8f2-952e20785d27","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7557d7-df6d-4834-90ce-ce980bcfd651","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64902","PortSpecifier":{"PortValue":64902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64902","PortSpecifier":{"PortValue":64902}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970056,"nanos":987383325},"http":{"id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:28fba4a0-e90e-5f31-2421-b675f25ff671","preferred_username":"alice_lead","scope":"profile email","sid":"5onYP8NeIh1DmFaA9_7ao-hh","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970356,"groups":["Engineering","Project-Alpha"],"iat":1780970056,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:28fba4a0-e90e-5f31-2421-b675f25ff671","preferred_username":"alice_lead","scope":"profile email","sid":"5onYP8NeIh1DmFaA9_7ao-hh","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14c8482c-14e9-49ec-9cd5-041d9323e8ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20400","PortSpecifier":{"PortValue":20400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:20400","PortSpecifier":{"PortValue":20400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":13117925},"http":{"id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8d65d33-86e8-4113-8764-3f8e3e4984b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28636","PortSpecifier":{"PortValue":28636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6598797a-9bb8-4146-9671-84f6f250ff71","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:28636","PortSpecifier":{"PortValue":28636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":37958632},"http":{"id":"6598797a-9bb8-4146-9671-84f6f250ff71","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6598797a-9bb8-4146-9671-84f6f250ff71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62caabe1-b86a-4c5a-86e1-61ba55605051","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":42270408},"http":{"id":"62caabe1-b86a-4c5a-86e1-61ba55605051","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1Rg7oy3XACpB6rMMa_XmDiQqYANxk8FderB4PNzACJXgqdHK2YZH0S9WWNcG8","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.57","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.57","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"62caabe1-b86a-4c5a-86e1-61ba55605051"},"host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","id":"62caabe1-b86a-4c5a-86e1-61ba55605051","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":42270408,"seconds":1780970057},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.57:44204","port":44204}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"e8270cdf-b154-42ce-8d1f-a4956b2efeaf","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62caabe1-b86a-4c5a-86e1-61ba55605051","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0474a09-3999-43a5-9723-8ce539292a78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58072","PortSpecifier":{"PortValue":58072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0474a09-3999-43a5-9723-8ce539292a78","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0474a09-3999-43a5-9723-8ce539292a78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.3:58072","PortSpecifier":{"PortValue":58072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":133619483},"http":{"id":"f0474a09-3999-43a5-9723-8ce539292a78","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0474a09-3999-43a5-9723-8ce539292a78","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970357,"groups":["Engineering","Project-Alpha"],"iat":1780970057,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b9b6caba-a962-ed3b-0a40-f2602c636915","preferred_username":"alice_lead","scope":"profile email","sid":"dkfLf-hUOT8bjRAx6c5WlBzr","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0474a09-3999-43a5-9723-8ce539292a78","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970357,"groups":["Engineering","Project-Alpha"],"iat":1780970057,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:b9b6caba-a962-ed3b-0a40-f2602c636915","preferred_username":"alice_lead","scope":"profile email","sid":"dkfLf-hUOT8bjRAx6c5WlBzr","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0474a09-3999-43a5-9723-8ce539292a78","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0474a09-3999-43a5-9723-8ce539292a78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0474a09-3999-43a5-9723-8ce539292a78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0474a09-3999-43a5-9723-8ce539292a78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0474a09-3999-43a5-9723-8ce539292a78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25540","PortSpecifier":{"PortValue":25540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:25540","PortSpecifier":{"PortValue":25540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":156199373},"http":{"id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d22103d2-2dd2-4f3f-85c4-648e85903f9a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c080af5-4a09-4d50-8494-52fee6466f1a","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":160700813},"http":{"id":"2c080af5-4a09-4d50-8494-52fee6466f1a","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.57","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.57","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"2c080af5-4a09-4d50-8494-52fee6466f1a"},"host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","id":"2c080af5-4a09-4d50-8494-52fee6466f1a","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":160700813,"seconds":1780970057},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.57:44204","port":44204}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"59e53c2a-2c24-4b22-afbd-0be590982fad","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c080af5-4a09-4d50-8494-52fee6466f1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64910","PortSpecifier":{"PortValue":64910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","method":"GET","path":"/maas-api/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.4:64910","PortSpecifier":{"PortValue":64910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":188386373},"http":{"id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/models",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30b78994-2a59-4696-a1d2-2c6c2bdc24fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:44204","PortSpecifier":{"PortValue":44204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":192782789},"http":{"id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","method":"GET","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":"subscription-info","method":"POST","url":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"alice_lead\"}"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":null,"Right":null},"Metrics":true,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.redhat-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true}}},"context":{"context_extensions":{"host":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"GET",":path":"/llm/facebook-opt-125m-simulated/v1/models",":scheme":"https","accept-encoding":"gzip","authorization":"Bearer **** sk-oai-1EFHc1hNnsOOqvUWf_omgIFmQMlMA5g9V9MwhrWzopct2AQRJvkxTgTZWXjAQ","user-agent":"Go-http-client/1.1","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.133.0.57","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.34~maas-default-gateway-openshift-default-8559cd5744-v8pp8.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"10.133.0.57","x-forwarded-proto":"https","x-maas-subscription":"simulator-subscription","x-request-id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e"},"host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","method":"GET","path":"/llm/facebook-opt-125m-simulated/v1/models","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":192782789,"seconds":1780970057},"url_path":"/llm/facebook-opt-125m-simulated/v1/models","user_agent":"Go-http-client/1.1"},"source":{"address":"10.133.0.57:44204","port":44204}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"# API key authentication: validate the key\nallow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\n\n# Kubernetes token authentication: check identity exists\nallow {\n  object.get(input.auth.identity, \"user\", {}).username != \"\"\n}\n\n# OIDC token authentication: check JWT subject exists\nallow {\n  object.get(input.auth.identity, \"sub\", \"\") != \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\t# Subscription name must be present (selector succeeded)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\t# Error field must be empty (no validation errors from selector)\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\t# Allowlist: phase must be exactly \"Active\" or \"Degraded\" (reject empty/unreconciled)\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\t# Subscription must not be deleting\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\n# Allowed groups and users from all MaaSAuthPolicies\nallowed_groups := [\"system:authenticated\"]\nallowed_users := []\n\n# Extract username from API key, OIDC, or K8s token\nusername := input.auth.metadata.apiKeyValidation.username\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n    { object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n    { object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n    { object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\n# Extract groups from API key, OIDC, or K8s token\ngroups := input.auth.metadata.apiKeyValidation.groups\n    { object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n    { object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n    { object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\n# Allow if user is in allowed users\nallow {\n    username == allowed_users[_]\n}\n\n# Allow if any user group is in allowed groups\nallow {\n    groups[_] == allowed_groups[_]\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"Authorization","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"authorization","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":"","Pattern":""}}},"object":""}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.keyId"}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","Engineering","Project-Alpha"],"groups_str":"system:authenticated,Engineering,Project-Alpha","keyId":"59e53c2a-2c24-4b22-afbd-0be590982fad","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true},"userid":"alice_lead"}}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc6e6c74-efd0-45be-98b4-093eccbb5f9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51744","PortSpecifier":{"PortValue":51744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"100.64.0.2:51744","PortSpecifier":{"PortValue":51744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.34:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1780970057,"nanos":280517452},"http":{"id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","method":"POST","headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","config":{"Name":"oidc-identities","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":null,"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970357,"groups":["Engineering","Project-Alpha"],"iat":1780970057,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ae519d77-fc91-69f5-1d11-921a78993377","preferred_username":"alice_lead","scope":"profile email","sid":"8OYGz_X4TNcyDR7Q3r5OMwHa","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","input":{"auth":{"identity":{"acr":"1","allowed-origins":["*"],"azp":"test-client","email_verified":true,"exp":1780970357,"groups":["Engineering","Project-Alpha"],"iat":1780970057,"iss":"https://keycloak.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com/realms/tenant-a","jti":"onrtro:ae519d77-fc91-69f5-1d11-921a78993377","preferred_username":"alice_lead","scope":"profile email","sid":"8OYGz_X4TNcyDR7Q3r5OMwHa","sub":"1fe587ea-9946-4678-8936-b64d70b4f1d5","typ":"Bearer"}},"context":{"context_extensions":{"host":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.34:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.7695ae6b-23bf-4afb-8528-5cb7055fd75a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","config":{"Name":"oidc-client-bound","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OPA":null,"JSON":{"Rules":{"Left":{"Selector":"auth.identity.azp","Operator":1,"Value":"test-client"},"Right":{"Left":null,"Right":null}}},"KubernetesAuthz":null,"Authzed":null},"object":true}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"alice_lead"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"Engineering\",\"Project-Alpha\"]"}
{"level":"info","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-06-09T01:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85d79bd8-b626-4f47-a37a-1f22f237f6ec","authorized":true,"response":"OK"}